Senior Manager of Information Security and IT

ARCOS•Ohio City, OH

About The Position

The Senior Manager, Information Security and IT at Arcos leads the company’s security, compliance, and corporate IT functions. ARCOS software supports mission-critical operations for utilities and airlines, and the role is responsible for maintaining a high security standard and demonstrating that standard to customers. The role owns SOC 2 compliance across the Arcos product suite, the security program, vulnerability management, security incident response, customer security reviews, and corporate IT. It is a hands-on leadership position: the Senior Manager sets direction and priorities while also preparing for and running audits with auditors, reviewing and prioritizing findings, leading incident response, and answering customer security questions. The ideal candidate can present the company’s security posture to executives and work directly with the team on control gaps and alerts. Arcos Engineering builds cloud-native solutions and maintains, enhances, and modernizes legacy systems to improve performance, scalability, and resilience. Its work includes designing stateless, containerized, dynamically scalable services; using CI/CD pipelines, Infrastructure as Code, and explicit dependency management; and modernizing legacy architectures while integrating cloud-native principles where possible.

Requirements

Bachelor’s degree in computer science, information systems, or a related field, or equivalent work experience.
10+ years of experience in information security, including 4+ years leading a security or compliance program at a SaaS company.
Proven experience owning SOC 2 Type II audits end to end, working directly with auditors and driving remediation across multiple teams.
Hands-on experience with vulnerability management, penetration testing, and security incident response.
Solid understanding of AWS security controls and services, and ability to set security requirements for and partner with cloud operations teams.
Working knowledge of security frameworks such as NIST CSF, NIST 800-53, or ISO 27001.
3+ years of people management experience, including hiring and developing staff and managing contractors.
Strong written and verbal communication skills, with the ability to explain risk clearly to executives, customers, and engineers.
Experience with SOC 2 Type II compliance and audit management.
Experience with vulnerability scanning and penetration test management.
Experience with SIEM and endpoint detection and response (EDR) tools.
Knowledge of AWS security services, including IAM, GuardDuty, Inspector, and WAF.
Experience administering Microsoft Entra ID and Microsoft 365.
Knowledge of security policy and risk management.

Nice To Haves

Experience with compliance automation platforms such as Vanta or equivalent.
Experience supporting customers in regulated industries such as utilities or aviation.
Application security experience, including SAST/DAST, secure code review, and threat modeling.
Knowledge of privacy regulations such as GDPR, CCPA, and PIPEDA.
Certifications such as CISSP, CISM, CISA, or CCSP.

Responsibilities

Lead Arcos’s information security, compliance, and corporate IT functions.
Own SOC 2 compliance across the Arcos product suite and manage SOC 2 Type II audits end to end.
Set direction and priorities for the security program.
Manage vulnerability management, penetration testing, and security incident response.
Prepare for and run audits with auditors; review and prioritize findings and drive remediation across teams.
Respond to customer security reviews and questions, and explain security posture and risk to executives, customers, and engineers.
Set security requirements for and partner with cloud operations teams.
Hire and develop staff and manage contractors.