Information Security Senior Manager

Glovis•Irvine, CA

7d•Onsite

About The Position

The Information Security Senior Manager is responsible for leading and overseeing the organization’s enterprise-wide information security program. This role provides strategic direction, governance, and operational oversight for cybersecurity policies, risk management, compliance, and incident response. The position ensures the confidentiality, integrity, and availability of information systems while aligning security initiatives with business objectives and regulatory requirements.

Requirements

Bachelor's Degree Required
8 - 12 Years of Direct Experience in Information Security Required
3 Years of Indirect Experience Required
7 - 10+ Years of Supervisory Experience Required
Strong knowledge of cybersecurity frameworks, standards, and best practices (e.g., ISO 27001, risk management frameworks) required
Hands-on understanding of security technologies including firewalls, IDS/IPS, SIEM, endpoint protection, and vulnerability management tools required
Ability to assess cybersecurity risks and translate technical findings into business-relevant recommendations required

Nice To Haves

10 - 15 Years of Direct Experience Preferred
5 Years of Indirect Experience Preferred
CISSP, CISM, or equivalent advanced security certifications preferred
Excellent analytical, problem-solving, and decision-making capabilities preferred

Responsibilities

Develop, implement, and continuously improve enterprise information security policies, standards, procedures, and guidelines
Lead information security governance, risk management, and compliance programs to meet internal standards and external regulatory requirements
Oversee security architecture and controls across network, systems, applications, endpoint, and cloud environments
Establish and manage incident response and cyber risk response programs, including investigation, containment, remediation, and post-incident reporting
Direct vulnerability management activities, including vulnerability assessments, penetration testing coordination, risk prioritization, and remediation tracking
Ensure security monitoring, detection, and response capabilities are effective
Provide security leadership and expert guidance to IT, business stakeholders, and executive management on cybersecurity risks and mitigation strategies
Manage identity and access management (IAM), data protection, and privacy-related security controls
Lead internal and external security audits, assessments, and certifications (e.g., ISO/IEC 27001, TISAX, internal security audits)
Oversee third-party security risk management and ensure security requirements are applied to vendors and partners
Supervise, mentor, and evaluate information security team members (direct and indirect), including workforce planning and skill development
Support organization-wide cybersecurity awareness and training programs for employees and third parties
Review and approve security architectures for new systems, applications, and infrastructure initiatives
Participate in long-term and short-term IT and business planning activities related to risk management and digital transformation
Perform other security-related duties as assigned based on business needs

Benefits

Medical Insurance
Vision Insurance
Dental Insurance
Health Care & Dependent Care Flexible Spending Accounts (FSA)
Basic Life and AD&D as well as Short-Term & Long-Term Disability
Paid Vacation, Holidays, and Sick leave
Hospital and Critical Illness Insurance
Wellness Program and Gym Reimbursement
401(k) with Generous Matching
Referral Bonuses
Auto Allowance
Quarterly Employee Lunches, Summer Refreshments, and Monthly Team Building Activities
Discretionary Bonuses
Tuition Reimbursement