IT Information Security Manager

TerraPower•Bellevue, WA

About The Position

TerraPower is seeking an IT Information Security Manager to lead its information security analysts and engineers and own the organization’s security posture and day-to-day security operations. The role is designed to provide direct security-team leadership while allowing the Vice President of AI & IT to focus on strategic initiatives. The manager will develop and advocate for the team, foster a culture of ownership and early risk reporting, and provide leadership with clear risk assessments and recommendations. The manager will oversee threat detection and response, vulnerability management, incident response, security tooling, and the performance of TerraPower’s managed detection and response (MDR) vendor. The role will establish and maintain security policies, standards, and practices aligned with frameworks such as NIST 800-171 and ISO 27001 and evolving regulatory requirements. During security events, the manager may serve as incident commander or delegate that responsibility while keeping leadership informed. The position partners with infrastructure, application, AI, data, Legal, Procurement, and Compliance teams to integrate security into systems and processes and assess vendor and application risk. It also includes managing security-stack vendors and tooling decisions, supporting audits and assessments, and designing or operating security-awareness programs, including phishing simulations. The successful candidate brings significant hands-on security experience, people-management capability, sound judgment under ambiguity or pressure, clear communication with technical and non-technical stakeholders, and a collaborative, adaptable approach to evolving threats.

Requirements

Bachelor’s degree in Cyber Security, Computer Science, Information Systems, or a related field, or equivalent practical experience in information security roles.
At least 6 years of information security experience, including a minimum of 3 years leading security teams.
Experience in information security operations, ideally with direct oversight of staff and third-party security vendors such as MDR or SOC providers.
Significant hands-on information security experience, with an analyst and/or engineering background in areas such as SOC operations, vulnerability management, identity and access, or cloud security.
Prior people-management experience; ideally, experience leading both analysts and engineers.
Familiarity with security compliance frameworks and documentation such as POA&Ms, SSPs, and NIST, and experience supporting audits and assessments.
Experience partnering with Legal, Procurement, and Compliance to evaluate vendor and application risk.
Experience designing or running security-awareness programs, including phishing simulation campaigns.
Ability to operate independently and make sound judgment calls under ambiguity or pressure.
Strong communication skills, including the ability to explain technical risk to non-technical stakeholders.
Collaborative, people-first approach to security as a shared responsibility.
Curiosity and adaptability, including staying current with the evolving threat landscape and evaluating new tools and approaches.

Nice To Haves

Experience leading both information security analysts and cybersecurity engineers.
Experience managing MDR or SOC vendors.
Familiarity with NIST 800-171, ISO 27001, or similar security frameworks.

Responsibilities

Directly manage, coach, develop, and advocate for a team of information security analysts and engineers.
Own day-to-day security operations, including threat detection and response, vulnerability management, incident response, and security tooling.
Manage the performance and expectations of TerraPower’s MDR vendor.
Set and maintain security policies, standards, and practices aligned with industry frameworks and evolving regulatory requirements.
Serve as incident commander or delegate appropriately during security events and keep leadership informed.
Partner with infrastructure, application, AI, and data teams to build security into systems and processes.
Manage vendor relationships and tooling decisions for the security stack.
Build a team culture where people feel safe raising risks and mistakes early.
Translate technical risk into business terms and provide leadership with risk assessments and recommendations.
Support audits and assessments and collaborate with Legal, Procurement, and Compliance to evaluate vendor and application risk.
Design or run security-awareness programs, including phishing simulation campaigns.