Security Trust and Assurance Manager

Sonar•Austin, TX

5d•Onsite

About The Position

Sonar is seeking a Security Trust and Assurance Manager to join their Information Security team. The primary goal of this role is to build deep trust with Sonar's rapidly growing customer base by ensuring a top-tier security posture. The manager will work closely with the CISO and various teams to shape customer communication regarding security, privacy, and compliance, providing accurate and timely information. This role is crucial for business growth and embraces Sonar's collective intelligence mindset.

Requirements

Unwavering Customer Obsession: Viewing security as a way to enable people and build solutions that help teams innovate without compromising safety.
Contract & Legal Acumen: Solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts.
Technical Diplomacy & Engineering Collaboration: Ability to partner with Engineering to validate technical details and explain complex security requirements in clear, simple business terms.
Executive Presence: Comfort and experience working directly with senior leaders, including a CISO, communicating strategy, reporting on trust metrics, and advising on risk.
Extensive Multi-Domain InfoSec Expertise: Deep experience across security domains such as GRC, Cloud Security, IAM, or Application Security.
Familiarity with common compliance frameworks like SOC 2, ISO 27001, and GDPR.
AI Proficiency: Proven ability to use AI tools and create complex prompts to solve security problems and automate governance tasks.
Autonomous Leadership & Organizational Acumen: Strong organizational skills to manage multiple high-stakes projects, audit reviews, and contract negotiations with minimal supervision.

Responsibilities

Manage a straightforward process for answering security and technical questions from customers and internal users.
Enhance and maintain the Trust Center to proactively answer customer questions and serve as a go-to resource.
Collaborate with Engineering, Product, go-to-market, and Information Security teams to translate complex technical details into clear, accurate, and friendly customer responses.
Review customer contracts, MSAs, and DPAs, providing feedback, redlining, and negotiation support on security clauses in partnership with Legal and Sales teams.
Maintain accuracy of customer trust systems and support a federated security approach across Sonar.
Drive improvements and add new capabilities to customer trust tooling.
Develop and refine prompts and automated workflows using LLMs for AI Prompt Engineering to ensure security information systems remain valid and up-to-date.