![]()
Information Security Manager
Location: Remote
Type: Permanent, Full-Time, Exempt
Duration: Permanent
Position Overview
The Information Security Manager will translate organizational priorities into actionable security roadmaps, strengthen operational processes, and help create a proactive, security-first culture. The role will also champion security automation and the practical use of AI-enabled tools to improve efficiency, reduce manual work, and enhance threat detection and response.
Key Responsibilities
Security Governance, Risk, and Compliance
- Lead security governance, risk management, and compliance activities.
- Support compliance with frameworks and standards such as NIST, HIPAA, and PCI DSS.
- Oversee security policies, standards, procedures, and technical controls.
- Direct vulnerability management, risk assessments, compliance audits, and remediation efforts.
- Ensure appropriate patching, configuration hardening, access controls, and vulnerability remediation across endpoints, servers, networks, and cloud environments.
- Coordinate penetration testing and the remediation of identified vulnerabilities.
- Oversee third-party security risk assessments and vendor security requirements.
- Lead security awareness and education programs across technical and business teams.
Security Strategy and Stakeholder Partnership
- Help define and execute the organization's security strategy and roadmap.
- Translate business and technology priorities into security projects, operational standards, and resource plans.
- Provide architectural and operational oversight for security initiatives.
- Partner with infrastructure, cloud, network, data, and business teams to incorporate security requirements into technology initiatives.
- Evaluate emerging threats, security technologies, threat intelligence, and vendor capabilities.
- Develop meaningful security metrics, dashboards, and reporting for organizational leadership.
- Manage relationships with security vendors, managed detection and response providers, and other external security partners.
- Monitor third-party service performance and compliance with service-level expectations.
Security Operations, Incident Response, and Automation
- Oversee daily security operations across cloud, network, endpoint, and application environments.
- Ensure timely triage, escalation, and resolution of security incidents.
- Serve as an escalation point for complex or high-impact security events.
- Direct root-cause analysis, post-incident reviews, and remediation planning.
- Maintain and regularly test incident response, disaster recovery, and business continuity procedures in partnership with other teams.
- Review security-related technology changes and ensure compliance with change management practices.
- Promote the use of automation, scripting, AI-enabled security technology, and security orchestration tools.
- Identify repetitive security processes that can be automated to reduce manual effort and improve response times.
- Maintain security documentation, monitoring standards, configuration baselines, and alerting practices.
- Prioritize and oversee security projects to ensure alignment with organizational needs.
Team Leadership and Development
- Lead, coach, and develop a small team of security professionals.
- Establish team goals, priorities, workload assignments, staffing plans, and support coverage.
- Build technical depth through coaching, training, certifications, and professional development.
- Foster a collaborative and accountable culture focused on security excellence, service, documentation, continuous learning, and operational ownership.
- Identify skill gaps and develop plans to strengthen the team's capabilities.
- Promote effective collaboration between security and other technology teams.
Required Qualifications
- Bachelor's degree in information technology, computer science, cybersecurity, or a related discipline, or equivalent professional experience.
- Seven or more years of progressive experience in cybersecurity, security engineering, or a related field.
- Three or more years of experience directly managing or leading technical security professionals.
- Experience with hiring, coaching, performance management, and staff development.
- At least five years of hands-on experience with enterprise security tools and technologies.
- At least five years of experience with security architecture, incident response, vulnerability management, and compliance programs.
- Strong understanding of cybersecurity principles, security architecture, protocols, and industry best practices.
- Experience managing security incidents and making sound decisions during high-pressure situations.
- Experience with regulatory and security frameworks such as NIST, HIPAA, and PCI DSS.
- Experience working with managed detection and response providers, security vendors, and third-party security partners.
- Demonstrated success improving security processes, implementing automation, or optimizing security operations.
- Experience leading cross-functional security or technology projects.
- Strong communication and stakeholder management skills, including the ability to explain security risks to technical and nontechnical audiences.
- Ability to balance security requirements with business needs and usability.
- Ability to manage multiple complex initiatives and competing priorities.
Top Skills
- Information security leadership and team development
- Security operations and incident response
- Governance, risk, and compliance
- Vulnerability management and remediation
- Security architecture and engineering
- Cloud security
- Security automation and operational improvement
- Vendor and managed security provider management
- Cross-functional communication and stakeholder partnership
- Security metrics, reporting, and continuous improvement
Tools and Technology Experience
Candidates should have experience with several of the following:
- Security information and event management platforms
- Endpoint detection and response platforms
- Intrusion detection and prevention systems
- Enterprise firewalls and network security tools
- Endpoint and server protection platforms
- Vulnerability scanning and management tools
- Security orchestration, automation, and response platforms
- Cloud security controls in Microsoft Azure and AWS
- Microsoft security technologies
- Cisco network and security technologies
- Identity and access management tools
- Security monitoring, alerting, and reporting platforms
- Scripting or workflow automation tools
- AI-enabled security tools and platform-native AI capabilities
- Dashboards and service data used for security reporting, prioritization, and root-cause analysis
Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.
California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
If you would like to complete our voluntary self-identification form, please or copy and paste the following link into an open window in your browser: ;/p>
Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.
Company Profile:
Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs.
Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles.
Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting .
Benefits Information:
Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.
We look forward to working with you.
Beacon Hill. Employing the Future
