Senior Information Security Manager

🔥 17 hours ago

🏄 California – Remote

🏄 California – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

People.ai

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

Consulting • Marketing • Artificial Intelligence

People. ai is a company that revolutionizes revenue strategies using artificial intelligence (AI). They offer a comprehensive solution, SalesAI, which integrates generative AI to automate tasks, assess account health, and provide coaching recommendations. Their platform enhances customer relationship management (CRM) through automated data capture and analysis, making sales processes more efficient. People. ai serves industries such as high tech, life sciences, and telecommunications, aiming to optimize go-to-market (GTM) strategies and improve revenue outcomes for sales, revenue operations, enablement, and marketing teams.

📋 Description

• Own and mature preventative security capabilities across cloud, SaaS, endpoint, identity, network, and data environments • Translate broad security objectives into concrete technical requirements, controls, tooling, and implementation plans • Evaluate, select, configure, and deploy security platforms and tooling across DLP, insider threat, endpoint security, IAM, vulnerability management, access controls, and security monitoring • Continuously assess security posture, identify gaps and vulnerabilities, prioritize risk, and drive remediation through completion • Partner with IT, Engineering, DevOps, and Product to integrate security controls into technologies, infrastructure, and business initiatives • Build metrics and reporting on security control effectiveness and overall security posture • Partner with Security Operations on visibility and protection for threat investigation and response • Develop, maintain, and test incident response playbooks, business continuity processes, and disaster recovery plans • Partner with CISO, CIO, and CTO on security compliance initiatives and work directly with auditors • Translate SOC 2, ISO 27001, ISO 42001, GDPR, CCPA/CPRA, and EU AI Act requirements into practical technical controls • Provide technical direction and mentorship to security engineers, analysts, IT partners, and external contractors • Serve as a trusted security advisor across technical and non-technical stakeholders • Own ambiguous security challenges from strategy and evaluation through implementation, measurement, and continuous improvement

🎯 Requirements

• 7+ years of progressive experience in information security, with meaningful hands-on experience implementing enterprise security controls • 2+ years of technical leadership, team lead, or people management experience • Deep understanding of cloud, SaaS, endpoint, identity, network, and data security, including traditional and Agentic AI environments and workloads • Strong hands-on experience implementing security tooling and controls rather than solely defining policy or overseeing implementation • Experience with DLP, IAM, endpoint security, vulnerability management, insider threat, access management, and security monitoring • Strong understanding of modern cloud infrastructure, security architecture, and risk management • Experience operating in a modern Mac, Linux, cloud, SaaS, and open-source-heavy environment • Experience automating security controls and workflows through scripting (e.g., Python) and infrastructure as code security (e.g., Terraform, policy as code, CI/CD pipeline guardrails) • Working knowledge of NIST, CIS, ISO 27001, SOC 2, and Zero Trust • Experience participating in security audits, working directly with auditors, gathering technical evidence, and remediating findings • Deep knowledge of securing third-party API and OAuth integrations; scoping, token lifecycle management, and revocation across SaaS and data platforms • Ability to translate complex technical threats and vulnerabilities into actionable solutions with Engineering, Product, IT, and non-technical stakeholders • Strong analytical and problem-solving skills with the ability to independently evaluate security challenges and determine the right technical approach • Experience working within U.S.-based technology environments and familiarity with enterprise security expectations • Comfortable operating autonomously in a fast-moving environment where priorities and requirements will continue to evolve

🏖️ Benefits

• Regular employees may be eligible for commissions or bonus programs (target included in OTE) • Equity • Benefits