Senior Manager of Information Security and IT

ARCOS•Ohio City, OH

1d•$185,000 - $195,000

About The Position

The Senior Manager, Information Security and IT at Arcos leads the company’s security, compliance, and corporate IT functions. ARCOS software supports mission-critical operations for utilities and airlines, and customers expect a high security standard and evidence of that standard. The role owns SOC 2 compliance across the Arcos product suite, the security program, vulnerability management, security incident response, customer security reviews, and corporate IT. This is a hands-on leadership role. The Senior Manager sets direction and priorities while also working directly on audits, reviewing and prioritizing findings, leading incident response, and answering customer security questions. The role calls for someone comfortable presenting the company’s security posture to executives and investigating control gaps or alerts with the team. The Arcos engineering organization builds cloud-native solutions and maintains, enhances, and modernizes legacy systems to improve performance, scalability, and resilience. It designs stateless, containerized, dynamically scalable services and uses CI/CD pipelines, Infrastructure as Code, and explicit dependency management. The organization also evolves legacy systems by refactoring monolithic architectures, improving efficiency, and integrating cloud-native principles where possible.

Requirements

Bachelor's degree in computer science, information systems, or a related field, or equivalent work experience.
10+ years of experience in information security, including 4+ years leading a security or compliance program at a SaaS company.
Proven experience owning SOC 2 Type II audits end to end, working directly with auditors and driving remediation across multiple teams.
Hands-on experience with vulnerability management, penetration testing, and security incident response.
Solid understanding of AWS security controls and services, and ability to set security requirements for and partner with cloud operations teams.
Working knowledge of security frameworks such as NIST CSF, NIST 800-53, or ISO 27001.
3+ years of people management experience, including hiring and developing staff and managing contractors.
Strong written and verbal communication skills, including the ability to explain risk clearly to executives, customers, and engineers.
Experience with SOC 2 Type II compliance and audit management.
Experience with vulnerability scanning and penetration test management.
Experience with SIEM and endpoint detection and response (EDR) tools.
Experience with AWS security services including IAM, GuardDuty, Inspector, and WAF.
Experience administering Microsoft Entra ID and Microsoft 365.
Experience with security policy and risk management.

Nice To Haves

Experience with compliance automation platforms such as Vanta or equivalent.
Experience supporting customers in regulated industries such as utilities or aviation.
Application security experience, including SAST/DAST, secure code review, and threat modeling.
Knowledge of privacy regulations such as GDPR, CCPA, and PIPEDA.
Certifications such as CISSP, CISM, CISA, or CCSP.

Responsibilities

Lead security, compliance, and corporate IT functions.
Own SOC 2 compliance across the Arcos product suite and manage SOC 2 Type II audits end to end, including working with auditors and driving remediation across teams.
Set direction and priorities for the security program.
Manage vulnerability management, penetration testing, and security incident response.
Conduct customer security reviews and respond to customer security questions.
Review and prioritize audit findings and address control gaps and alerts with the team.
Set security requirements for cloud operations and partner with cloud operations teams.
Present security posture and explain risk to executives, customers, and engineers.
Hire and develop staff and manage contractors.