Information Security Manager

Information Security Governance:

• Own and improve the information security governance framework, including policies, standards, and control documentation.
• Maintain risk registers, exceptions, and remediation plans.
• Ensure documented practices accurately reflect organizational operations.

Security Program Management:

• Take day-to-day ownership of the security program and manage Information Security Analysts.
• Oversee recurring security cadences including incident, vulnerability, and control reviews.
• Coordinate security initiatives across Engineering, IT, and Compliance.

Incident Response:

• Own the operational incident response process from coordination to remediation.
• Ensure proper documentation and stakeholder communication.
• Continuously improve procedures, escalation paths, and readiness.

Compliance Regulatory Support:

• Partner with Compliance to support audits, regulatory requirements, and evidence gathering.
• Produce recurring security reports and metrics for leadership.
• Maintain the security compliance program within Vanta.