information security manager

Sonalysts, Inc.

<div>Description:

Sonalysts, Inc. is seeking an Information Systems Security Manager (ISSM) with critical thinking and effective communication skills to join our system development team responsible for mission-critical, training, and real-time military software applications that will be deployed in commercial and/or private environments. 
The ISSM position will require the potential partner to work on-site in Colorado Springs, CO and may require some travel in support of the project. 
Submission Deadline: October 24, 2025
Prompt responses are encouraged because the deadline could be accelerated or delayed if, in our judgement, either is warranted. 
What you will be doing:<ul><li>
Leading and Managing assigned Information Systems Security professionals.
</li><li>The ISSM leads the planning, organization, maintenance and information systems security compliance of classified information systems in accordance with the NISPOM, Risk Management Framework (RMF), DCSA Assessment &amp; Authorization Process Manual, and DoD component-specific security requirements.</li><li>
Responsible for a growing and complex portfolio of systems each with their own unique requirements and projects</li><li>
Identifying, managing and resolving information system vulnerabilities by performing vulnerability scans, analyzing results, and implementing remediation actions.
</li><li>Maintaining up-to-date Plan of Action and Milestones (POA&amp;M)</li><li>
Maintains information system security plans, contingency plans, incident response plans, and other critical processes for all systems under their responsibility</li><li>
Monitors day-to-day server and network security operations and personnel</li><li>
Maintaining documentation used to support audits and inspections</li><li>
Accountable for inventory of hardware and software</li><li>
Leads Configuration Control Board (CCB) and configuration management activities for all systems under their responsibility</li><li>
Communicating daily with project stakeholders (software developers, testers, etc.) to ensure business events and activities are supported</li><li>
Installing, configuring, upgrading software, troubleshooting and resolving network/computer/peripheral issues as needed</li><li>
Occasionally traveling to receive training or to complete system installations</li></ul><div></div> 
 What&rsquo;s in it for you:<ul><li>
Opportunity to challenge yourself (learn and grow) intellectually as technologies advance.</li><li>
Working on challenging and innovative projects.</li><li>
Salary ranges between $90,000-$160,000, dependent on experience, qualifications, and other relevant business criteria. There are no bonuses, commissions or other compensation unique to this job.</li><li>
General benefits for full-time employees are described below.</li><li><ul><li>
Flexible Work Schedule</li><li>
Paid Time Off, including Sick or Personal Time Off account and Vacation and Holiday account</li><li>
Educational Reimbursement Program</li><li>
Sonalysts Employee Stock Ownership Plan (ESOP)</li><li>
Sonalysts Retirement and Savings (401(K)) Plan</li><li>
Our health benefits include:</li><li><ul><li>
Comprehensive medical coverage offered through a High Deductible Health Plan with a national network of providers. A Health Reimbursement Account (HRA) is offered, which is used in conjunction with the High Deductible Health Plan.</li><li>
Life accidental death and dismemberment insurance</li><li>
Dental coverage</li><li>
Short-term disability insurance</li><li>
Long-term disability insurance</li><li>
Medical and dependent care flexible spending accounts</li></ul></li></ul></li></ul><div>
Note: The foregoing description of benefits at Sonalysts is a highly simplified summary of a series of lengthy, complex, legal plan documents. Moreover, the plan documents are changed from time to time, both to address changes in the law and to address changes in the policies of the company. This highly simplified summary is provided solely to comply with Colorado law regarding the posting of the general nature of job opportunities, and not to convey any rights to any person. In every case, eligibility for any benefit, and the specific application of the benefit, provided under any such plan will be determined entirely by the applicable plan document itself without any reference to the highly simplified summary provided above. No right to any benefit will accrue to anyone by virtue of the foregoing highly simplified summary description.</div><div></div> 
Required qualifications:<ul><li>
Must be a U.S. Citizen, possessing an active U.S. Department of Defense (DoD) SECRET security clearance *</li><li>
Bachelor&rsquo;s degree in an Information Technology-related field and five years of relevant information systems security experience; or ten years&rsquo; relevant Information Systems security experience</li><li>
Hold a current DOD Information Assurance Workforce (IAWF) Level II (or higher) IAM or IAT certification(s) (e.g., GSEC, Security+, SSCP, CCNA-Security, CISA, CISM, GCIH, CGED, CISSP, CASP)</li><li>
Experience in Enterprise Mission Assurance Support Service (eMASS) to manage RMF packages</li></ul> 
Preferred, but not required, experience in the following:<ul><li>
Possessing an active U.S. Department of Defense (DoD) TOP SECRET security clearance*</li><li>
A Level III DoD IAWF Certification
</li><li>Working knowledge of Microsoft Active Directory, including Group Policy Operations.</li><li>
Experience with administration of Microsoft Windows Server 2016 (or higher)</li><li>
Experience with administration of Microsoft Windows 10 (or higher)</li><li>
Experience with Red Hat Enterprise Linux OS</li><li>
Experience creating, maintaining, enforcing, training Security policies</li><li>
Experience communicating security policy and concepts to leadership and differing experience levels</li><li>
Experience with security administration of a DoD classified network/information system.
</li><li>Experience with network monitoring, testing and troubleshooting tools/utilities</li><li>
Working knowledge of Microsoft SQL server</li><li>
Experience with vulnerability scanning tools and techniques (Nessus/ACAS, Nmap, Eye Retina, Nexpose, Metasploit), Security Information and Event Management (SIEM) tools (Splunk, ArcSight, etc.) and techniques</li><li>
Knowledgeable in the use of scripting languages/tools to automate information system administration and security functions (Shell Script, PowerShell, Python, Bash etc.)</li><li>
Experience with Security Content Automation Protocol (SCAP) tools</li><li>
Experience with STIG Viewer</li></ul><ul><li> 
Maintaining a U.S. Government security clearance involves a comprehensive background check. Candidates are eligible for a clearance if they have demonstrated sound financial management (including good credit) over time, are free of criminal records, have limited foreign contacts or ties, and other factors indicative of a position of trust to protect information sensitive to the U.S. Government.</li></ul> 
Sonalysts, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against on the basis of, race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, disability, or other basis protected by law. 
This job is not available to residents of New York City because of local law restrictions there. 
Drug Testing Employer
 www.sonalysts.com</div>

Information Systems Security Manager (ISSM)

Inspire Management Training Center

We are seeking an experienced CISSM Trainer (Certified Information Systems Security Manager ) to deliver onsite and virtual training programs for professionals and corporate clients. The role includes preparing and tailoring training materials, leading interactive sessions with real-world cybersecurity examples, and supporting participants with exam preparation and certification success. The trainer will also provide feedback, post-training support, and stay current with the latest practices in information security, governance, and risk management to ensure training relevance.Key Responsibilities:<ul><li>Deliver Certified Information Systems Security Manager (CISSM) training sessions (onsite/virtual) for professionals and corporate clients.</li><li>Prepare and customize training materials, case studies, and practice exams according to each standards.</li><li>Facilitate engaging and interactive learning sessions, incorporating real-world cybersecurity and information security management examples.</li><li>Support participants with exam preparation and guidance to achieve certification success.</li><li>Provide feedback, assessments, and post-training support where required.</li><li>Stay updated with the latest information security, governance, and risk management practices to ensure training relevance.</li></ul>Requirements:<ul><li>Must hold an Certified Information Systems Security Manager (CISSM) certification.</li><li>Minimum 3 years of professional experience in information security management, IT governance, or risk/compliance.</li><li>Proven track record in training delivery or knowledge transfer (corporate training experience preferred).</li><li>Strong presentation, communication, and facilitation skills.</li><li>Ability to work on a freelance/contract basis with flexible scheduling.</li></ul>Preferred Qualifications:<ul><li>Additional certifications such as CISM, CISSP, ISO 27001 Lead Auditor/Implementer, CRISC are an advantage.</li><li>Experience training corporate clients in the Middle East will be highly valued.</li><li>Ability to provide online and classroom training.</li></ul>What We Offer:<ul><li>Attractive freelance training fees (per session).</li><li>Opportunities for repeat assignments and long-term collaboration.</li><li>Exposure to corporate clients and professionals across Qatar and the GCC.</li><li>Flexibility to conduct sessions both onsite and virtual.</li></ul>Job Types: Part-time, ContractExperience:<ul><li>Trainer (CISSM): 3 years (Required)</li></ul>License/Certification:<ul><li>CISM, CISSP, ISO 27001 Lead Auditor/Implementer, CRISC (Preferred)</li><li>CISSM certification (Required)</li></ul>Location:<ul><li>Doha (Preferred)</li></ul>

Freelance Trainer - CISSM (Certified Information Systems Security Manager)

NYC IT Inc

<div>Hello Professionals, 
 
This is Meba Laitstep from NYC IT Inc. I am writing to you regarding the Information Security Risk Compliance Manager position.
 
I have mentioned the job Description below for your review. Please let me know if you are interested and send me your most up-to-date resume, including your expected hourly rate, along with your Work Authorization. 
As this is an urgent business requirement, we would greatly appreciate your prompt response. 
 
Position Details: 
 
Job title: Information Security Risk Compliance Manager 
Only GC/US Citizen 
Only Local to NY/NJ 
 
**Only candidates that are willing to go onsite in NYC** 
 
Information Security Risk Compliance Manager will report to the Chief Information Security Officer, within the Division of Office for the Commissioner, Office of Information Technology (OIT). The unit is comprised of a Chief Information Security Officer and a senior and junior-level Security architecture position. 
 
Scope of Work Objectives: The Information Security Risk Compliance Manager oversees the organization's efforts in: 
 
<ul><li>Risk assessment, Risk mitigation,</li><li>Compliance management,</li><li>Security governance, incident response, vendor risk management,</li><li>Security awareness and training,</li><li>Security audits and assessments, reporting and communication, continual improvement, and cross-functional collaboration.</li><li>Their role is to ensure that the organization's systems, networks, and processes are secure, compliant with regulations and standards, and aligned with organizational goals and objectives.</li></ul>
 
Responsibilities: 
 
<ul><li>Conduct risk assessments to identify potential threats and vulnerabilities to the organization.</li><li>Develop and implement risk management strategies and policies to mitigate identified risks.</li><li>Monitor and evaluate risk exposure across various departments and business units.</li><li>Coordinate with stakeholders to ensure compliance with regulatory requirements and industry standards.</li><li>Communicate risk management strategies and findings to senior management and relevant stakeholders.</li><li>Lead the development and maintenance of the organization's risk register and risk management framework.</li><li>Provide guidance and support to departments and teams in implementing risk mitigation measures.</li><li>Conduct training and awareness programs on risk management principles and practices.</li><li>Continuously monitor and review the effectiveness of risk management strategies and adjust as necessary.</li><li>Stay updated on emerging risks and industry trends to proactively address potential threats to the organization.</li><li>Maintain and enhance the company-wide security awareness program.</li><li>Take ownership of establishing and enforcing security standards both within the team and across the organization. Work proactively and collaboratively to achieve change management and buy-in. Deliverables:</li><li>Compliance Management: Ensure compliance with relevant regulations, standards, and frameworks such as GDPR, HIPAA, ISO 27001, NIST, etc., by establishing and maintaining appropriate controls and processes.</li><li>Risk Mitigation: Develop and oversee risk mitigation strategies and controls to address identified security risks, including implementing technical controls, security best practices, and security awareness training programs.</li><li>Incident Response: Develop and implement incident response plans and procedures to effectively respond to and manage security incidents, including data breaches, cyberattacks, and security breaches.</li><li>Vendor Risk Management: Assess and manage risks associated with third-party vendors and service providers, including evaluating their security posture, conducting due diligence assessments, and ensuring contractual compliance.</li><li>Cross-functional collaboration: Collaborate with IT teams, legal, HR, compliance, and other departments to ensure a holistic approach to information security risk management and compliance.</li><li>Continual Improvement: Monitor industry trends, emerging threats, and regulatory changes to ensure that the organization's information security risk and compliance programs remain up-todate and effective.</li></ul> 
 
Preferred Skills: 
 
<ul><li>Excellent verbal and written communication skills.</li><li>Ability to work both independently and as part of a team.</li><li>Knowledge of Networking (Firewall, Networking Protocols);</li><li>Working knowledge Frameworks</li><li>Working knowledge of Information Security Domains</li><li>Working knowledge of Security protocols</li><li>Working knowledge of Cloud computing</li></ul> 
 
 
 
Best Regards, 
 
 
 
Meba Laitstep 
IT Recruiter || NYC IT Inc. 
MWBE Certified 
 Mobile: +1 315-210-8552 
 Email: recruiter@nycitinc.com</div>

Information Security Risk Compliance Manager - ISRM

duPont Registry

<div>Position Title: IT Security Manager 
Location: Miami, Florida (In-Office) 
Reports To: Director of Technology 
Position Type: Permanent &ndash; Full-Time 
ABOUT US

duPont REGISTRY Group proudly marks four decades as a cornerstone of the luxury automotive market in 2025. Renowned for connecting millions of buyers and sellers worldwide, duPont REGISTRY Group has facilitated billions in automotive transactions while setting the standard for excellence in the industry. 
POSITION OVERVIEW

As the IT Security Manager, you will lead the design, implementation, and ongoing management of our cybersecurity strategy across cloud infrastructure, internal systems, and customer-facing platforms. You'll work closely with engineering, infrastructure, legal, and compliance teams to ensure the security of sensitive data, protect the integrity of our technology, and maintain compliance with industry and regulatory standards. 
KEY RESPONSIBILITIES
<ul>
<li>Develop, implement, and maintain the company's information security policies, standards, and procedures.</li>
<li>Monitor and manage security across cloud platforms (primarily AWS), internal networks, and applications.</li>
<li>Lead threat detection, incident response, and remediation efforts.</li>
<li>Conduct regular vulnerability assessments and penetration tests; oversee mitigation plans.</li>
<li>Manage identity and access controls (IAM), data encryption, and endpoint security solutions.</li>
<li>Ensure compliance with relevant data privacy and security standards (e.g., GDPR, CCPA, ISO 27001).</li>
<li>Collaborate with development and DevOps teams to integrate security best practices into SDLC and infrastructure as code (IaC).</li>
<li>Conduct regular security training and awareness programs for employees.</li>
<li>Manage security vendors, tools, and platforms.</li>
<li>Prepare and present security reports and risk assessments to leadership.</li>
<li>Lead response planning and business continuity efforts related to cyber incidents.</li></ul> 


QUALIFICATIONS
<ul>
<li>Bachelor&rsquo;s degree in Information Security, Computer Science, Information Technology, or related field.</li>
<li>5+ years of experience in IT security roles, with at least 2 years in a leadership or management capacity.</li>
<li>Strong understanding of network security, application security, cloud security (especially AWS), and endpoint protection.</li>
<li>Experience with security frameworks and compliance standards such as NIST, ISO 27001, GDPR, CCPA.</li>
<li>Familiarity with tools such as SIEMs, vulnerability scanners, firewalls, and identity management solutions.</li>
<li>Hands-on experience with AWS security services (e.g., IAM, Security Hub, GuardDuty, WAF, KMS).</li>
<li>Strong analytical, problem-solving, and project management skills.</li>
<li>Excellent communication skills, with the ability to convey complex security topics to technical and non-technical stakeholders.</li></ul></div>

IT Security Manager

Bolt Insight

Role: Security and IT Manager
 Location: Hybrid (Istanbul Office)
 Salary: Competitive
 
About us
 We are an AI-powered consumer intelligence firm, utilizing cutting-edge market research methodologies to provide real-time consumer insights.
 
The Role
 
We’re looking for a Security and IT Manager to join our growing team.
 
This is a fantastic opportunity to own and shape the company’s security and IT practices, ensure compliance with international standards, and provide seamless IT support across the business.
 
You’ll collaborate with external security consultants, regulators, and internal stakeholders to maintain our compliance posture, protect our systems, and support our employees.
 
Responsibilities
 <ul>
<li>Ensure compliance with ISO 42001, SOC2, EU AI Act, GDPR, and other relevant standards in partnership with consultants and regulators.</li>
<li>Identify and remediate security vulnerabilities and gaps across devices, infrastructure, and software systems.</li>
<li>Act as the primary IT point of contact, handling device setup, troubleshooting, and account management.</li>
<li>Manage and administer Microsoft environments (Azure Entra ID, Intune, and M365).</li>
<li>Lead security awareness programs, ensuring employees complete trainings, phishing simulations, and compliance refreshers.</li>
<li>Maintain security documentation, policies, and trust center resources.</li>
</ul>
Requirements
 <ul>
<li>Bachelor’s degree in Computer Science, Information Security, MIS, or a related field.</li>
<li>3+ years of experience in IT administration or information security.</li>
<li>Strong knowledge of security frameworks and compliance standards (ISO, SOC2, GDPR, EU AI Act).</li>
<li>Hands-on experience with Microsoft environments (Azure Entra ID, Intune, M365).</li>
<li>Excellent problem-solving, documentation, and communication skills in English.</li>
</ul>
Bonus Points
 <ul>
<li>Certifications such as CISSP, CISM, CompTIA Security+, or Microsoft Security Administrator.</li>
<li>Experience in a startup or small-team environment.</li>
</ul>
Why Work for Bolt Insight?
 
At Bolt Insight, we’re a vibrant and growing startup with a passionate team that thrives on innovation and collaboration. Here’s what you can expect when you join us:
 <ul>
<li>Hybrid working and the opportunity to work in a nomadic way</li>
<li>Multinet Meal Ticket</li>
<li>Flexible working environment</li>
<li>Private Medical Insurance through Allianz</li>
<li>Employee referral bonus</li>
<li>Virtual or local team gatherings</li>
<li>In-house recognition awards to celebrate our 'lightening bolts'</li>
</ul>
Join us at Bolt Insight, where we celebrate creativity, offer plenty of flexibility, and truly value each team member’s contributions. It’s time to be part of something special!
 
If you are excited about building a secure, compliant, and reliable IT environment for a global AI-driven company, we’d love to hear from you!

Security and IT Manager

<div>Company Description 
SGS is the world&rsquo;s leading Testing, Inspection and Certification company. We operate a network of over 2,500 laboratories and business facilities across 115 countries, supported by a team of 99,500 dedicated professionals. With over 145 years of service excellence, we combine the precision and accuracy that define Swiss companies to help organizations achieve the highest standards of quality, compliance, and sustainability. 
Job Description 
We are looking for a well experienced Product Manager in Digital Trust Services who will manage the infosec business for the country in terms of developing strategy for business growth, develop audit team, liaise with BD for selling digital trust solutions and oversee P&amp;L for infosec segment in addition to conducting audits and trainings. 
Job Responsibilities<ul><li>
Understand and communicate infosec services offered by SGS</li><li>
Liaise with BD manager to drive business growth strategy</li><li>
Translate global initiatives and drive actions at local level</li><li>
Review and manage P&amp;L for digital trust services</li><li>
Develop a team of auditors / trainer based on market needs to offer full scale of digital trust services</li><li>
Participate in seminars and conferences related to digital trust</li><li>
Conduct audits on information security management systems</li><li>
Assist BD team in clients&rsquo; meeting whenever required</li><li>
Guide sales team in technical queries from clients</li><li>
Any other job assigned by BA Manager relating to digital trust segment</li></ul> 

Qualifications 
Required Experience, Education &amp; Certifications<ul><li>
Academic qualification: Minimum Graduate Preferably Masters&rsquo; degree in IT related field.</li><li>
Experience: Minimum of five years preferably in certification body</li><li>
Approved Lead auditor with specific qualification for information security management system (i.e. approved for ISO 27001 and other information security management systems e.g. ISO 22301, ISO 20000).<ul><li>
Qualified trainer for Infosec management systems</li><li>
Qualifications in IT sector</li><li>
Excellent skills in English writing, communication and interpersonal skills.</li></ul></li></ul> 

Additional Information 
#LI-Onsite</div>

Product Manager Digital Trust Services

Roads and Transport Authority

<div>
 
 The Roads and Transport Authority (RTA) is hiring a
 
 Cyber Security Chief Engineer
 
 to manage and enhance the organization's
 
 IT security infrastructure
 
 . This role involves the
 
 design
 
 ,
 
 implementation
 
 , and
 
 monitoring
 
 of critical security technologies to ensure protection against evolving threats while aligning with compliance frameworks.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Deploy and maintain
 
 advanced firewalls
 
 ,
 
 IDS/IPS
 
 ,
 
 SIEM
 
 systems, and other cyber defense tools
 </li>
 <li>
 Lead
 
 incident response
 
 , conduct
 
 root cause analysis
 
 , and implement mitigation strategies
 </li>
 <li>
 Perform
 
 penetration testing
 
 ,
 
 security assessments
 
 , and ensure continuous risk mitigation
 </li>
 <li>
 Implement
 
 security policies
 
 ,
 
 procedures
 
 , and regulatory compliance (
 
 ISO 27001
 
 ,
 
 ISR
 
 )
 </li>
 <li>
 Provide technical support during
 
 audits
 
 and deliver
 
 management reports
 
 </li>
 <li>
 Collaborate with internal teams and
 
 government agencies
 
 on security governance
 </li>
 <li>
 Stay current with
 
 emerging threats
 
 ,
 
 tools
 
 , and
 
 global cybersecurity trends
 
 </li>
 <li>
 Automate workflows using
 
 Python
 
 ,
 
 Bash
 
 , or
 
 PowerShell
 
 </li>
 </ul>
 
 
 
 
 
 Qualifications:
 
 
 <ul>
 <li>
 
 Bachelor&rsquo;s degree
 
 in
 
 Computer Science
 
 ,
 
 Information Technology Engineering
 
 , or equivalent
 </li>
 <li>
 Minimum of
 
 8 years of experience
 
 in cybersecurity, IT security engineering, or related roles
 </li>
 <li>
 Strong knowledge of
 
 network protocols
 
 (TCP/IP, DNS, HTTP),
 
 log analysis
 
 , and
 
 threat management
 
 </li>
 <li>
 Experience with
 
 Windows/Linux
 
 systems,
 
 system logs
 
 , and
 
 security automation
 
 </li>
 <li>
 Familiarity with
 
 ISO 27001
 
 ,
 
 ISR
 
 , and
 
 government security frameworks
 
 </li>
 </ul>
 
 
 
 <ul>
 <li>
 
 Preferred certifications:
 
 </li>
 <li>
 
 
 CISSP
 
 
 
 &ndash; Certified Information Systems Security Professional
 
 </li>
 <li>
 
 
 CISM
 
 
 
 &ndash; Certified Information Security Manager
 
 </li>
 <li>
 
 
 CEH
 
 
 
 &ndash; Certified Ethical Hacker
 
 </li>
 </ul>
 
 
 
 
 
 Core Competencies:
 
 
 
 
 Technical:
 
 
 <ul>
 <li>
 Hands-on experience with
 
 SIEM tools
 
 (e.g.,
 
 Splunk
 
 ,
 
 QRadar
 
 ,
 
 ArcSight
 
 )
 </li>
 <li>
 Knowledge in
 
 cybersecurity concepts
 
 ,
 
 alert handling
 
 , and
 
 incident lifecycle management
 
 </li>
 </ul>
 
 
</div>

Cyber Security Chief Engineer

Search 10000+ Information security manager jobs near you this October. New roles added regularly across leading industries. Apply today.