Information Security Manager

United States·Phoenixmid

OtherInformation Security Manager

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Design, implement, and manage the enterprise-wide cybersecurity framework. Develop, maintain, and enforce information security policies, standards,

Requirements Summary

Bachelor’s degree in Information Security, Computer Science, or a related discipline required; Master’s preferred. Minimum 5–8 years of experience in information security or risk management roles.

Technical Tools

OtherInformation Security Manager

The Information Security Manager leads the design, implementation, and continuous enhancement of the organization’s cybersecurity program under the Security Officers guidance. This position ensures that technical and administrative safeguards align with HIPAA, CIS, NIST, and other regulatory frameworks. The role serves as a program owner across key domains including control governance, incident response, third-party risk management, and policy development, driving a culture of proactive risk management and compliance.

Responsibilities

~1 min read

→
Design, implement, and manage the enterprise-wide cybersecurity framework.
→
Develop, maintain, and enforce information security policies, standards, and procedures aligned with regulatory and industry best practices.
→
Map and manage controls across HIPAA, NIST CSF, CIS Controls, and related frameworks.
→
Oversee governance platforms to track risks, evidence, and control ownership.
→
Lead third-party risk management activities, including security assessments, contract reviews, and lifecycle oversight.
→
Support Data Loss Prevention (DLP), vulnerability management, and incident response processes to detect and mitigate threats.
→
Coordinate internal and external audit activities, ensuring timely remediation of findings.
→
Deliver security awareness training and mentorship to junior team members.
→
Participate in executive and governance committees to represent the information security function and provide strategic guidance.

Requirements

~2 min read

Bachelor’s degree in Information Security, Computer Science, or a related discipline required; Master’s preferred.
Minimum 5–8 years of experience in information security or risk management roles.
Strong knowledge of HIPAA Security Rule, NIST CSF, CIS Controls, and ISO 27001 frameworks.
Experience with governance, risk, and compliance (GRC) tools and risk tracking systems.
Demonstrated ability to manage incident response and vulnerability management programs.
Excellent analytical, communication, and stakeholder engagement skills.
Professional certifications such as CISSP, CISM, or CRISC preferred.

You are not required to disclose information about physical or mental limitations that you believe will not interfere with your ability to do the job. However, you should disclose any physical or mental impairment for which special arrangements or accommodations are needed to enable you to perform the essential functions of the job. Your description of any impairment and suggestions for reasonable accommodations will be considered in providing reasonable accommodations. The duties and responsibilities herein describe the general nature and level of work required. They are not intended to be construed as a complete list of all duties, responsibilities and skills required to meet requirements for this position.

Requires the ability to write, dictate or use a keyboard to communicate directives.
Utilizes proper body mechanics in various environments.
Requires the ability to function in multiple environments due to travel requirements.

FLSA Status: Exempt

EEO Status: First/Mid-Level Officials and Managers