IT Information Security Manager

TerraPower LLC. • Bellevue, WA

1d • $157,247 - $209,663

About The Position

TerraPower is hiring an IT Information Security Manager to lead its security team and own the organization’s security posture and day-to-day security operations. The role directly manages information security analysts and engineers, providing coaching, development, and advocacy while enabling the Vice President of AI & IT to focus on strategic initiatives. The successful candidate will foster team ownership of security outcomes and provide leadership with clear risk assessments and recommendations.

The manager oversees threat detection and response, vulnerability management, incident response, security tooling, and the performance of TerraPower’s managed detection and response (MDR) vendor. They establish and maintain security policies, standards, and practices aligned with frameworks such as NIST 800-171 and ISO 27001 and evolving regulatory requirements. The role may serve as incident commander or delegate that responsibility, keeping leadership informed during security events.

The position partners with infrastructure, application, AI, data, Legal, Procurement, Compliance, and business teams to integrate security into systems and processes, assess vendor and application risk, and support audits and assessments. It also manages security vendors and tooling decisions and supports security awareness and phishing simulation programs. The manager is expected to build a collaborative, people-first culture in which risks and mistakes can be raised early.

Requirements

• Bachelor’s degree in Cyber Security, Computer Science, Information Systems, or a related field, or equivalent practical experience in information security roles.
• At least 6 years of information security experience.
• At least 3 years leading security teams, ideally including information security analysts and cyber security engineers.
• Significant hands-on information security experience, with an analyst and/or engineering background in areas such as SOC operations, vulnerability management, identity and access, or cloud security.
• Experience managing information security operations, ideally with direct oversight of staff and third-party security vendors such as MDR/SOC providers.
• Familiarity with security compliance frameworks and documentation such as POA&Ms, SSPs, and NIST, and experience supporting audits and assessments.
• Experience partnering with Legal, Procurement, and Compliance to evaluate vendor and application risk.
• Experience designing or running security awareness programs, including phishing simulation campaigns.
• Ability to operate independently and make sound judgments under ambiguity or pressure.
• Strong communication skills, including the ability to translate technical risk into business terms for non-technical stakeholders.
• Collaborative, people-first approach that treats security as a shared responsibility.
• Curiosity and adaptability, including staying current with the evolving threat landscape and evaluating new tools and approaches.

Nice To Haves

• Experience leading both information security analysts and engineers.
• Experience overseeing third-party security vendors such as MDR/SOC providers.
• Familiarity with NIST 800-171, ISO 27001, or similar security frameworks.

Responsibilities

• Directly manage, coach, develop, and advocate for information security analysts and engineers.
• Own day-to-day security operations, including threat detection and response, vulnerability management, incident response, and security tooling.
• Manage the performance and expectations of TerraPower’s MDR vendor.
• Set and maintain security policies, standards, and practices aligned with industry frameworks and regulatory requirements.
• Serve as incident commander or delegate appropriately during security events, keeping leadership informed.
• Partner with infrastructure, application, AI, and data teams to incorporate security into systems and processes.
• Manage vendor relationships and tooling decisions for the security stack.
• Partner cross-functionally with Legal, Procurement, and Compliance to evaluate vendor and application risk.
• Support audits and assessments and maintain familiarity with security compliance documentation.
• Design or run security awareness programs, including phishing simulation campaigns.
• Build a collaborative team culture that encourages early reporting of risks and mistakes.

Benefits

• Competitive compensation.
• Eligibility to participate in discretionary short-term incentive payments.
• Comprehensive medical and wellness benefits, including medical, vision, dental, life, and disability benefits.
• Gender affirmation benefits.
• Parental leave.
• 401(k) plan.
• 21 days of annually accrued paid time off.
• 10 paid holidays.
• Relocation assistance.
• Professional and educational support opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager