Information Security Program Manager Job at SD Solutions, LLC (Washington, District of Columbia)

New

Principal Information Security Manager

This is not a build-from-scratch role. It is a step up in maturity: fewer manual...

Location

Germany , Berlin

Salary:

Not provided

Staffbase

Expiration Date

Until further notice

Requirements

5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
Proven ownership of ISO 27001 and/or SOC 2 programs
Track record of representing InfoSec to enterprise customers, including security reviews and escalations
Must be fluent in German and English
Comfortable with AI-driven tooling
actively looks for automation opportunities in compliance and operations

Job Responsibility

Lead ISO 27001 and SOC 2 audit cycles end-to-end
Own the control framework
Prepare the InfoSec program for investor and M&A due diligence scrutiny
Own the response to enterprise customer security questionnaires and RFPs
Represent Staffbase in customer security reviews, calls, and audits
Build scalable approaches to reduce response time
Maintain the risk register and drive risk treatment decisions
Own vendor security assessments for critical and high-risk suppliers
Partner with Procurement and Legal on AI-assisted review workflows
Own the internal security policy framework

What we offer

competitive compensation including LTIP (unit-based Long Term Incentive Plan)
flexible working time models
hybrid work option
yearly flex work allowance of €1560
31 vacation days annually (incl. one floating holiday)
pro rata fully paid Fridays off during August
company pension scheme
one Volunteers Day per year for supporting a social project

Fulltime

Information Security Manager

We are looking for a Lab Security Manager who can rise to the complexity of prot...

Location

United States , Austin

Salary:

152000.00 - 228000.00 USD / Year

AMD

Expiration Date

Until further notice

Requirements

Background in semiconductor, hardware engineering, or other R&D-intensive industries where pre-release IP protection is mission-critical
Experience evaluating and securing connectivity to ODC (Outsourced Design Center) or OSAT (Outsourced Semiconductor Assembly and Test) partners, or equivalent third-party manufacturing and engineering partners in the semiconductor supply chain
Experience securing AI/ML compute infrastructure, including familiarity with GPU cluster deployments, fabric interconnects, and associated operational environments
One or more relevant certifications: CISSP, CISM, GIAC or equivalent
Experience working in or alongside a Security Operations Center (SOC), including familiarity with SIEM platforms, UEBA tools, and alert triage workflows
Prior experience in a role that required coordination across physical security, IT security, and legal/compliance functions simultaneously
BS/MS preferred in related field
SANS, MCSE, RHCSS, CISSP, CISA, CISM certification(s)

Job Responsibility

Define and enforce security standards across global labs and compute facilities
Partner with facilities teams to embed security into lab design and operations
Maintain site-specific security plans for critical locations
Establish security controls for large-scale compute environments (e.g., GPU clusters, AI farms)
Enforce network segmentation, monitoring, and anomaly detection
Mitigate risks at the intersection of physical and logical access
Lead protection of sensitive IP, including pre-release hardware and software
Develop insider threat controls and collaborate with HR, Legal, and SOC
Manage protocols for handling sensitive assets, visitors, and contractors
Ensure compliance with EAR, ISO, NIST, and other frameworks

Fulltime

Information Security Manager

Implement and maintain information security policies, standards, and procedures....

Location

Egypt , New Cairo

Salary:

Not provided

Ethics HR

Expiration Date

Until further notice

Requirements

Bachelor’s/Master’s degree in Information Technology, Computer Science, Cybersecurity, or related field from a reputable university
Minimum of 8 years of experience in information security, with at least 3 years in a managerial role
Strong knowledge of IT security frameworks, CBE cybersecurity guidelines, and regulatory compliance
Experience in vulnerability management, incident response, and security operations
Excellent analytical, problem-solving, and communication skills
Preferred certifications include CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or CEH

Job Responsibility

Implement and maintain information security policies, standards, and procedures
Conduct regular security audits, risk assessments, and vulnerability assessments
Monitor security events, investigate incidents, and coordinate remediation activities
Collaborate with IT and business teams to ensure secure system design and deployment
Maintain and update access control mechanisms, encryption standards, and authentication protocols
Ensure compliance with relevant cybersecurity and data protection regulations
Provide training and awareness programs to staff on information security best practices
Prepare reports on information security metrics, risks, and incidents for senior management

Fulltime

Principal Information Security Manager

This is not a build-from-scratch role. It is a step up in maturity: fewer manual...

Location

Germany , Berlin

Salary:

Not provided

Staffbase

Expiration Date

Until further notice

Requirements

5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
Proven ownership of ISO 27001 and/or SOC 2 programs
Track record of representing InfoSec to enterprise customers, including security reviews and escalations
Fluent in German and English
Comfortable with AI-driven tooling
actively looks for automation opportunities in compliance and operations

Job Responsibility

Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation
Own the control framework and ensure it stays current as the business evolves
Prepare the InfoSec program for investor and M&A due diligence scrutiny
Own the response to enterprise customer security questionnaires and RFPs
Represent Staffbase credibly in customer security reviews, calls, and audits
Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality
Maintain the risk register and drive risk treatment decisions with relevant stakeholders
Own vendor security assessments for critical and high-risk suppliers
Partner with Procurement and Legal on AI-assisted review workflows
Own the internal security policy framework, keep it current, understandable, and enforced

What we offer

attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
flexible working time models and the option of hybrid work
yearly flex work allowance of €1560
31 vacation days annually (incl. one floating holiday)
pro rata fully paid Fridays off during August
company pension scheme
one day off per year for supporting a social project (Volunteers Day)

Fulltime

Client Information Security Manager (ISM)

The NTT DATA Services Information Security Manager (ISM) oversees and coordinate...

Location

United States , Plano

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

12+ years of relevant experience
Strong knowledge of standards / regulations impacting information security (e.g., NIST, ISO, PCI)
Experience with information security internal & external audits, contract compliance, and quality initiatives
Significant experience in identifying and utilizing a global risk based management model.

Job Responsibility

Ensure the delivery of information security services to the customer is in compliance with the contract and any applicable standards and regulatory requirements (e.g., PCI, SOX)
Collaborate with the client in the definition and implementation of information security policies, strategies, procedures and configurations in order to ensure confidentiality, integrity and availability of client’s environment and data
Participate with the customer in the strategic design process to translate security and business requirements into processes and systems
Evaluate new / emerging security products and technologies and make recommendations to customer leadership in regards to the security posture impact on the organization
Identify, review and recommend information security improvements as they relate to the achievement of the customer’s business goals and objectives
Manage and drive remediation efforts related to information security
remediation may be from incidents, penetration tests, vulnerability scans, internal/external audits and Critical Practice assessments
Identify information security weaknesses and/or gaps in the customer’s current operations and work with the customer to bring information security operations up to standards
Participate and represent IT Security in Delivery/Operational meetings
conduct an information security operational review meeting with account (e.g., Customer Delivery Executive) and customer (e.g., CISO) key stakeholders with topics including information security status and performance

Fulltime

Information Security & Program Protection Planning Analyst

Astrion is seeking a highly skilled Information Security & Program Protection Pl...

Location

United States , Huntsville

Salary:

Not provided

Astrion

Expiration Date

Until further notice

Requirements

Bachelor’s degree in information systems, Cybersecurity, Engineering, or related field
8+ years of experience supporting DoD acquisition programs with a focus on Program Protection
System Security Engineering
Acquisition Security / Risk Management
Strong working knowledge of DoDI 5200.39, DoDI 5000.02, AFPAM 63-113
CPI / Critical Components protection methodologies
Experience evaluating acquisition documentation and contractor deliverables
Active Top-Secret clearance with ability to obtain SCI

Job Responsibility

Lead the development and continuous update of Program Protection Plans (PPP) in accordance with DoDI 5200.39, DoDI 5000.02, and AFPAM 63-113
Support emerging and legacy Space Sensing satellite programs with tailored protection strategies
Ensure alignment of PPPs with Critical Program Information (CPI) and Critical Components (CC) protection requirements
Analyze and integrate inputs from Counterintelligence Support Plans (CISP), Integrated Threat Assessments (ITA), System Threat Assessment Reports (STAR), and Operations Security (OPSEC) Plans
Translate threat data into actionable protections and mitigation strategies
Develop, review, and maintain Anti-Tamper Plans (ATP), Technology Assessment / Control Plans (TA/CP), Security Classification Guides (SCG), and System Security Engineering Management Plans (SSEMP)
Ensure compliance with DoD acquisition security policies and lifecycle requirements
Evaluate acquisition artifacts for security compliance, including Engineering Change Proposals (ECPs), Configuration Change Proposals (CCPs), and Task Change Proposals (TCPs)
Provide written risk assessments addressing cost, schedule, performance, and security impacts
Conduct contractor site visits to validate implementation of system security controls

What we offer

Competitive salaries
Continuing education assistance
Professional development
Multiple healthcare benefits package options
401K with employer matching
Competitive time off policy along with a federally recognized holiday schedule

Fulltime

Principal Information Security Manager

The next chapter is about making it investor-ready, AI-efficient, and capable of...

Location

Germany , Chemnitz

Salary:

Not provided

Staffbase

Expiration Date

Until further notice

Requirements

5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
Proven ownership of ISO 27001 and/or SOC 2 programs
Track record of representing InfoSec to enterprise customers, including security reviews and escalations
Fluent in German and English
Comfortable with AI-driven tooling
actively looks for automation opportunities in compliance and operations

Job Responsibility

Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation
Own the control framework and ensure it stays current as the business evolves
Prepare the InfoSec program for investor and M&A due diligence scrutiny
Own the response to enterprise customer security questionnaires and RFPs
Represent Staffbase credibly in customer security reviews, calls, and audits
Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality
Maintain the risk register and drive risk treatment decisions with relevant stakeholders
Own vendor security assessments for critical and high-risk suppliers
Partner with Procurement and Legal on AI-assisted review workflows
Own the internal security policy framework, keep it current, understandable, and enforced

What we offer

Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
Support - we’re offering a company pension scheme
Volunteers Day - you’ll get one day off per year for supporting a social project

Principal Information Security Manager

We inspire people to achieve great things together. Our mission is to help organ...

Location

Germany , Dresden

Salary:

Not provided

Staffbase

Expiration Date

Until further notice

Requirements

5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
Proven ownership of ISO 27001 and/or SOC 2 programs
Track record of representing InfoSec to enterprise customers, including security reviews and escalations
Fluent in German and English
Comfortable with AI-driven tooling
actively looks for automation opportunities in compliance and operations
Experience supporting or preparing for M&A or investor due diligence processes
Background working alongside Legal, Procurement, and Engineering
Practical understanding of cloud security architecture (enough to challenge and validate, not operate)
Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent

Job Responsibility

Act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day
Lead ISO 27001 and SOC 2 audit cycles end-to-end
Own the control framework
Prepare the InfoSec program for investor and M&A due diligence scrutiny
Own the response to enterprise customer security questionnaires and RFPs
Represent Staffbase credibly in customer security reviews, calls, and audits
Build scalable approaches to reduce response time
Maintain the risk register and drive risk treatment decisions
Own vendor security assessments for critical and high-risk suppliers
Partner with Procurement and Legal on AI-assisted review workflows

What we offer

Competitive Compensation - we offer attractive salary packages including LTIP
Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
Support - we're offering a company pension scheme
Volunteers Day - you'll get one day off per year for supporting a social project

Fulltime

Select Country

Information Security Program Manager

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?