Senior Manager, Information Security

Role overview

Responsibilities

• Build, mentor, and manage a high-performing GRC team; track OKRs and foster continuous development.
• Identify and monitor IT risks, assess exceptions, and oversee tactical and strategic resolution plans.
• Coordinate internal, third-party, and regulatory audits and ensure corrective actions are implemented.
• Develop and enforce security policies, standards, procedures, and guidelines aligned with regulations and business needs.
• Conduct security assessments of vendors, partners, and cloud providers for regulatory and contractual compliance.
• Oversee GRC platform deployment and configuration for control monitoring, reporting, and improvement.
• Implement cybersecurity awareness programs and deliver training to end users or management.
• Advise executive leaders and stakeholders on IT risk and compliance strategy aligned with enterprise goals.

Required qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field.
• 10+ years in IT security or risk management, including 2+ years leading teams managing regulatory or compliance programs.
• Proficiency in GRC tools; familiarity with identity/access management (LDAP/AD, SAML, OIDC), cloud security, and integration with SIEM, vulnerability management, and ITSM platforms.
• Strong leadership, communication, stakeholder engagement, problem-solving, and decision-making skills; ability to turn compliance requirements into actionable strategies.
• CISSP, CISM, CRISC, CISA, or CGEIT certifications preferred.
• Technology risk consulting, IT audit, and multi-country compliance experience highly valued.

Compensation

• Expected compensation range is $132,000 to $182,000 annually.

About BDO