Information Security Manager

Job not on LinkedIn

🕒 September 27

🔔 Pennsylvania – Remote

infoinfo

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on ONEARC's careers page, not through a job board

First seen by Remote Rocketship September 27

Logo of ONEARC

ONEARC

2 - 10 employees

Founded 2016

🔧 Hardware

📦 Logistics

🏗️ Construction

Hardware • Logistics • Construction

ONEARC is a Sweden-based provider of autonomous and efficient turn-key solutions for port and marine industries. They design, supply and service hardware equipment for ports and terminals (including hydraulic port mooring systems, linkspans, side ramps, passenger gangways and Ro‑Ro/ferry equipment), and manage conversions and retrofits of ships and port installations. ONEARC also offers professional services across the lifecycle — early engineering studies, naval architecture, mechanical and steel structural design, civil engineering, project management, inspections/surveys, 3D CAD and drone/laser scanning — aimed at improving port efficiency, safety and uptime.

📋 Description

• Design and manage the enterprise-wide information security strategy aligned with SDLC and business goals • Lead risk assessments and vendor security reviews across third-party integrations and internal systems • Integrate security automation, including SAST/DAST, into CI/CD pipelines • Oversee the security incident response program and lead investigations during high-priority security events • Ensure compliance with SOC2, ISO 27001, GDPR, NIST, and parent-company policies • Manage external audits and certification processes • Develop security training for non-technical staff and secure-coding workshops for developers • Present security posture reports to senior management and board members • Maintain confidentiality, integrity, and availability of SaaS platforms and customer data • Implement security controls across software development and deployment processes • Foster a proactive security-first culture through education and transparent reporting

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Management Information Systems, or a related field • 7–10+ years of experience in information security • At least 3 years in a leadership or management capacity • Proven experience in a software development or "Software as a Service" (SaaS) environment • CISSP or CISM is highly preferred • Ability to lead technical teams and influence organizational change without direct authority • Expertise in analyzing evolving cyber threats and designing scalable mitigation strategies • Ability to translate technical security vulnerabilities into business-impact terms • Deep understanding of NIST, SOC2, and ISO compliance standards • Familiarity with cloud security (AWS/Azure/GCP), containerization, and automated security testing tools • Ability to anticipate future security trends • Ability to work in a fast-paced environment and remain calm during active security incidents • Strong attention to detail • Ability to balance security controls with developers’ operational needs

🏖️ Benefits

• Occasional travel between Orlando and Pittsburgh offices or for security conferences and audits

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 September 26

Mastercam

201 - 500

🚘 Automotive

💼 Consulting

📦 Logistics

DevSecOps Security Engineer securing Mastercam’s cloud-native manufacturing software, Kubernetes platforms, CI/CD pipelines, and AI workloads. Advancing secure-by-design practices across a global manufacturing technology company.

🕒 September 26

Skylight

11 - 50

🏭 Manufacturing

📣 Marketing

💼 Consulting

Product Security Engineer securing Skylight’s family-focused calendar products, apps, and cloud platform. Owning vulnerability remediation, bug bounty operations, security tooling, and threat modeling.

🕒 September 25

Neo4j

501 - 1000

☁️ SaaS

🤖 Artificial Intelligence

🏢 Enterprise

Product Counsel guiding product, privacy, security, and open-source legal strategy for Neo4j’s graph intelligence platform. Enabling compliant innovation across enterprise software, cloud, and AI products.

🕒 September 25

Gordon Rees Scully Mansukhani, LLP

1001 - 5000

💼 Consulting

🏥 Healthcare

🛡️ Insurance

Cybersecurity and privacy litigation attorneys handling data breach, technology, and class action cases. Joining Gordon Rees Scully Mansukhani, a national full-service law firm.

🕒 September 25

Carrier

10,000+ employees

🏗️ Construction

🏥 Healthcare

📦 Logistics

AI Security Engineer securing Carrier’s AI platforms, cloud services, and applications. Building controls, automation, monitoring, and incident response for intelligent climate and energy solutions.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok