Manager of Information Security

Beyond Finance•Chicago, IL

3d•$135,000 - $160,000

About The Position

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future. While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. The Role As the Information Security Manager, you will lead our Information Security team focused on Endpoint Security, IAM and Insider Risk. This is a critical people management role focused on protecting the company's sensitive data and mitigating internal risks. You will manage a multi-tiered team of security professionals responsible for securing our corporate data across a diverse environment. Your primary objective is to drive the team's mission to protect company assets, develop and enforce security controls, and translate security priorities into an actionable roadmap.

Requirements

7+ years of InfoSec experience with a background in Data Protection, SaaS Security, or Endpoint Security in a mixed-OS environment.
3+ years of formal people management experience in a security context.
Strong project management skills, with the ability to define business value, manage timelines, and ensure projects align with strategic goals.
Deep expertise in the technologies and strategies used to protect corporate data and prevent unauthorized transfer.
Proven ability to translate security requirements into an actionable engineering roadmap.
Exceptional communication skills, with experience presenting sensitive topics to leadership.
A relentless drive to see complex initiatives and investigations through to completion.

Nice To Haves

Hands-on experience with data protection tools (such as DLP), SASE/SSE solutions, SIEM, and security monitoring platforms.
Experience developing and managing security policy and control frameworks.
Knowledge of incident response, digital forensics, and eDiscovery processes.

Responsibilities

Team Leadership: Lead, mentor, and develop a team of security engineers and analysts, managing their performance and career growth while fostering a culture of high performance and ownership.
Project Management & Execution: Define, manage, and execute security projects from conception to completion. Clearly articulate the business value of initiatives and ensure projects remain aligned with strategic goals and are delivered on time.
Data Protection Program Management: Manage the company's data protection program, including monitoring for and investigating potential security policy violations. Oversee the incident response process for internal security events, reporting to HR, Legal, and department heads as needed.
Security Control & Policy Deployment: Develop and implement strategies to protect sensitive company data. Drive the deployment of new preventative controls and security policies across our endpoints, SaaS applications, and communication platforms to reduce risk.
Stakeholder Communication: Serve as the primary point of contact for internal data security matters, frequently briefing business leaders on incidents, new controls, and the company's security posture.
Driving Results: Proactively drive security initiatives and incident remediation to completion by removing roadblocks and instilling a sense of urgency.