Senior Manager, Information Security

Job Summary

To enhance vendor security risk management, the full-time Senior Manager, Information Security will execute third-party risk assessments, evaluate vendor control environments, and support the overall security program while collaborating with stakeholders in a hybrid work environment.

Key responsibilities

• Conduct third-party risk assessments, identifying control gaps and documenting risk findings
• Manage relationships with service providers to ensure compliance with security policies and standards
• Communicate risk assessments and recommendations to stakeholders at various organizational levels

Required qualifications

• Bachelor's degree in Information Systems or related field, or equivalent experience/certification
• 7+ years of information technology leadership experience, including security policy management
• 3+ years of direct experience in third-party risk management
• One or more current information security certifications (e.g., CRISC, CISM, CISA, CISSP)
• Experience executing third-party/vendor risk assessments within a defined framework