information security manager

Ethics HR

Job Responsibilities:<ul><li>Implement and maintain information security policies, standards, and procedures.</li><li>Conduct regular security audits, risk assessments, and vulnerability assessments.</li><li>Monitor security events, investigate incidents, and coordinate remediation activities.</li><li>Collaborate with IT and business teams to ensure secure system design and deployment.</li><li>Maintain and update access control mechanisms, encryption standards, and authentication protocols.</li><li>Ensure compliance with relevant cybersecurity and data protection regulations.</li><li>Provide training and awareness programs to staff on information security best practices.</li><li>Prepare reports on information security metrics, risks, and incidents for senior management.</li></ul>Job Requirements:<ul><li>Bachelor&rsquo;s/Master&rsquo;s degree in Information Technology, Computer Science, Cybersecurity, or related field from a reputable university.</li><li>Minimum of 8 years of experience in information security, with at least 3 years in a managerial role.</li><li>Strong knowledge of IT security frameworks, CBE cybersecurity guidelines, and regulatory compliance.</li><li>Experience in vulnerability management, incident response, and security operations.</li><li>Excellent analytical, problem-solving, and communication skills.</li><li>Preferred certifications include CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or CEH.</li></ul>Work Location: In person

Information Security Manager

Hallmark

<div>WHO WE ARE AND WHAT WE DO

Our Information Security Department is a dynamic and forward-thinking team dedicated to safeguarding the organization's digital assets and operations. Leveraging cutting-edge technologies and innovative strategies, we proactively design, build, and implement robust security solutions across a diverse range of business functions. 


WHAT YOU&rsquo;LL DO &amp; HOW IT SHAPES OUR SUCCESS

The Information Security Manager - Identity is responsible for leading and maturing the organization&rsquo;s security operations capabilities across Identity platforms and SAP Security processes. This role bridges tactical execution and strategic leadership, ensuring effective protection, detection, and response capabilities while aligning with enterprise risk management, governance and compliance objectives.

This position oversees core Identity Security functions including Identity Lifecycle Managment, Authentication services, Access Management, IGA, PAM and other identity focused capabilities.

The role is accountable for operational excellence, continuous improvement, and integration of threat intelligence into detection and response processes across hybrid environments (on-premises and cloud).

This position is also responsible for working with Managed Service Providers associated with the above workflows and our internal frontline support team and on-call rotation. This will include activities related to proper documentation and workflows for frontline support and training for appropriate capabilities. 


BASIC QUALIFICATIONS

The following are required to be considered for this role:
<ul>
<li>Bachelor&rsquo;s degree or 4 years of professional experience</li>
<li>At least 7 years of IT experience (preference for Security Identity Experience)</li>
<li>Leadership experience</li>
<li>Experience with technology, process, and collaboration</li></ul> 


PREFERRED QUALIFICATIONS

Your resume will stand out if you have the following:
<ul>
<li>CISSP, CISA\CISM, CCNA, MCSA and/or GSEC</li>
<li>Strong communication skills</li>
<li>Information Security tools, processes, procedures, and concepts</li>
<li>Ability to work with all levels of the organization</li> 
</ul>
ADDITIONAL DETAILS
<ul>
<li>The salary range for this role is $150,000- $160,000. Final compensation varies based on several factors.</li>
<li>This is a U.S.-based remote role.* We&rsquo;re committed to creating a connected, collaborative culture, no matter where you are. You&rsquo;ll have access to virtual tools, team support, and opportunities to engage and grow with us. *Due to state-specific benefits regulations, Hallmark cannot consider candidates for remote positions who reside in Alaska, Hawaii, or Puerto Rico, or any country outside of the United States.</li>
<li>This is a progressive role designed to grow with you. We&rsquo;ll match the job level to your skills and experience so you can hit the ground running and keep building your career.</li>
<li>This role is eligible for Hallmark&rsquo;s Annual Incentive Plan. More information will be shared during the interview process.</li>
<li>Hallmark is committed to recognizing and rewarding performance. Employees are eligible for annual merit-based increases, aligned with individual and company performance.</li>
<li>In alignment with our culture of care, Hallmark offers a competitive benefits package, including medical, dental and vision plans, paid time off, 401K with company match, and profit-sharing.</li></ul> 


COME JOIN US! Now&rsquo;s your chance to embrace a future with Hallmark- just follow the instructions below to apply. 


You must show how you meet the basic qualifications in a resume or document you upload, or by completing the work experience and education application fields. Accepted file types are DOCX and PDF.

In compliance with the Immigration Reform and Control Act of 1986, Hallmark Cards, Inc. and its subsidiary companies will hire only individuals lawfully authorized to work in the United States. Hallmark does not generally provide sponsorship for employment.

Employment by Hallmark is contingent upon the signing of the Employment Agreement, signing of an agreement to arbitrate in connection with the Hallmark Dispute Resolution Program, completing Form I-9 Employment Eligibility Verification, passing the urinalysis drug screen, education verification and satisfactory reference and background checks.

Hallmark is an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, age, pregnancy, national origin, physical or mental disability, genetics, sexual orientation, gender identity, veteran status, or any other legally-protected status. Principals only please. 


HALLMARK &ndash; Because Connecting With Each Other Has Never Been More Important
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities 
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights (https://www.eeoc.gov/poster) notice from the Department of Labor.</div>

Information Security Manager- Identity (remote)

Booz Allen Hamilton

<div>Information Systems Security Manager
The Opportunity:
As an information systems security manager, you know how critical it is to stay ahead of evolving threats by identifying and exploiting vulnerabilities before adversaries can. At Booz Allen, you'll bring that expertise to a mission-focused team where you'll advise appropriate senior leadership or authorizing officials of changes affecting the organization's cybersecurity posture. You&rsquo;ll use your understanding of cyber operations to apply emerging technologies, uncover system and network vulnerabilities, and collect and maintain data needed to meet system cybersecurity reporting, as well as ensure that security improvement actions are evaluated, validated, and implemented as required. 
 
In this role, you&rsquo;ll evaluate and approve development efforts to ensure that baseline security safeguards are appropriately installed to support cyber efforts across the Army enterprise network. Your ability to ensure that cybersecurity requirements are integrated into the continuity planning, and identify alternative information security strategies to address organizational security objectives, will support the security and resilience of critical infrastructure. 
This is your opportunity to help advance national security through cutting-edge cyber capabilities.
Join us. The world can't wait.
You Have:<ul><li>
5+ years of experience with NIST RMF policies, including continuous monitoring and information system security policies, standards, and procedures</li><li>
5+ years of experience supporting system ATO processes and creating artifacts, control implementation details, and POA&amp;Ms</li><li>
3+ years of experience with National Institute of Standards and Technology (NIST) security controls, the Governance, Risk, and Compliance (GRC) security documentation tool, RMF, and security compliance processes</li><li>
Knowledge of the DoD RMF process</li><li>
Knowledge of DoD A&amp;A processes and standards</li><li>
TS/SCI clearance
</li><li>Bachelor's degree</li><li>
IAM Level II Certification such as Certified Information Security Manager (CISM), Certified Information System Security Professional (CISSP) or Associate, CGRC, CASP+, or CompTIA Security X Certification</li></ul>
Nice If You Have:<ul><li>
Experience with the Enterprise Mission Assurance Support Service (eMASS)</li><li>
Experience using Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), or Assured Compliance Assessment Solution (ACAS)</li><li>
Experience managing the authorization status of DoD RMF from steps 1 through 6</li><li>
Ability to interface with senior leadership</li><li>
Possession of excellent verbal and written communication skills</li><li>
Master's degree</li><li>
DoD 8570 IASAE Level III Certification such as CISSP-ISSAP, CISSP-ISSEP, or CCSP Certification</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Information Systems Security Manager

Information Technology Senior Management Forum

<div><div>Posted Date
6/12/2026
</div><div>Description
<div>Manager Information Security Office (ISO), Enterprise Data
At Capital One, you will help consult on initiatives, programs, and projects to raise their game in Information Security. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. You are comfortable with Cloud Service technologies like Storage Services, Security &amp; Access Control Management, Container Services, and API Implementation and Management. You are familiar with various Cloud computing models to include IaaS, PaaS, and SaaS along with their architectural differences. Security is essential to what we do here, from protecting our customers to our associates.
Responsibilities:<ul><li>
Act as a central Information Security point of contact for Capital One&rsquo;s Enterprise Data organization</li><li>
Coordinate and execute proactive Information Security consulting to the business and technology teams covering API Security, File Transfer, Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, Datalake Architecture, BI, and consumption tools, and User Access Management</li><li>
Serve as an expert in Capital One&rsquo;s Information Security capabilities, solutions, policies, procedures and standards</li><li>
Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes</li><li>
Escalate and manage cyber security risk</li><li>
Provide ad hoc support on special Information Security hot topics for the business</li><li>
Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment</li><li>
Work with line of business leadership to anticipate their objectives and needs to better serve the line of business</li></ul>
About You:<ul><li>
You have a desire to work in a very fast moving, forward leaning, and modern computing environment</li><li>
You have a deep passion for Securing modern computing platforms</li><li>
You have a strong desire to continually learn about new technologies</li><li>
You possess strong conceptual thinking and communication skills</li><li>
You are able to work well under minimal supervision</li><li>
You are a demonstrated leader with team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including upper management, IT leaders, and technology vendors</li><li>
You maintain calmness and clarity of thought under pressure and ability to maintain confidentiality</li><li>
You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives</li></ul>
Basic Qualifications:<ul><li>
High School Diploma, GED or equivalent certification</li><li>
At least 4 years of experience working in cybersecurity or information technology</li><li>
At least 1 year of experience providing guidance and oversight of Security concepts</li><li>
At least 1 year of experience performing security risk assessments and security architecture reviews</li><li>
At least 1 year of experience with architecture, software design, networking, and cloud infrastructure</li></ul>
Preferred Qualifications:<ul><li>
Bachelor&rsquo;s Degree</li><li>
3+ years of experience with Software Security Architecture, Application Security, Threat Modeling, Penetration Testing, or Vulnerability Management</li><li>
3+ years of experience in securing a public cloud environment (AWS, GCP, Azure)</li><li>
1+ year of experience building software utilizing public cloud (AWS, GCP, Azure)</li><li>
1+ year of experience with Cloud patch management practices such as system rehydration and image management</li><li>
1+ year of experience utilizing Agile methodologies</li><li>
1+ year of experience with integrating SaaS products into an Enterprise Environment</li><li>
1+ year of experience with securing Container services</li><li>
1+ year of experience Splunk-Fu or Enterprise Monitoring experience</li><li>
1+ year of experience in Offensive and Defensive Security techniques</li><li>
1+ year of experience in a regulated environment</li><li>
Financial services industry experience</li><li>
Professional certifications such as AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP)</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $197,300 - $225,100 for Manager, Cyber Technical 

Plano, TX: $179,400 - $204,700 for Manager, Cyber Technical 

Richmond, VA: $179,400 - $204,700 for Manager, Cyber Technical 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Manager Information Security Office (ISO), Enterprise Data
At Capital One, you will help consult on initiatives, programs, and projects to raise their game in Information Security. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. You are comfortable with Cloud Service technologies like Storage Services, Security &amp; Access Control Management, Container Services, and API Implementation and Management. You are familiar with various Cloud computing models to include IaaS, PaaS, and SaaS along with their architectural differences. Security is essential to what we do here, from protecting our customers to our associates.
Responsibilities:<ul><li>
Act as a central Information Security point of contact for Capital One&rsquo;s Enterprise Data organization</li><li>
Coordinate and execute proactive Information Security consulting to the business and technology teams covering API Security, File Transfer, Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, Datalake Architecture, BI, and consumption tools, and User Access Management</li><li>
Serve as an expert in Capital One&rsquo;s Information Security capabilities, solutions, policies, procedures and standards</li><li>
Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes</li><li>
Escalate and manage cyber security risk</li><li>
Provide ad hoc support on special Information Security hot topics for the business</li><li>
Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment</li><li>
Work with line of business leadership to anticipate their objectives and needs to better serve the line of business</li></ul>
About You:<ul><li>
You have a desire to work in a very fast moving, forward leaning, and modern computing environment</li><li>
You have a deep passion for Securing modern computing platforms</li><li>
You have a strong desire to continually learn about new technologies</li><li>
You possess strong conceptual thinking and communication skills</li><li>
You are able to work well under minimal supervision</li><li>
You are a demonstrated leader with team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including upper management, IT leaders, and technology vendors</li><li>
You maintain calmness and clarity of thought under pressure and ability to maintain confidentiality</li><li>
You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives</li></ul>
Basic Qualifications:<ul><li>
High School Diploma, GED or equivalent certification</li><li>
At least 4 years of experience working in cybersecurity or information technology</li><li>
At least 1 year of experience providing guidance and oversight of Security concepts</li><li>
At least 1 year of experience performing security risk assessments and security architecture reviews</li><li>
At least 1 year of experience with architecture, software design, networking, and cloud infrastructure</li></ul>
Preferred Qualifications:<ul><li>
Bachelor&rsquo;s Degree</li><li>
3+ years of experience with Software Security Architecture, Application Security, Threat Modeling, Penetration Testing, or Vulnerability Management</li><li>
3+ years of experience in securing a public cloud environment (AWS, GCP, Azure)</li><li>
1+ year of experience building software utilizing public cloud (AWS, GCP, Azure)</li><li>
1+ year of experience with Cloud patch management practices such as system rehydration and image management</li><li>
1+ year of experience utilizing Agile methodologies</li><li>
1+ year of experience with integrating SaaS products into an Enterprise Environment</li><li>
1+ year of experience with securing Container services</li><li>
1+ year of experience Splunk-Fu or Enterprise Monitoring experience</li><li>
1+ year of experience in Offensive and Defensive Security techniques</li><li>
1+ year of experience in a regulated environment</li><li>
Financial services industry experience</li><li>
Professional certifications such as AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP)</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $197,300 - $225,100 for Manager, Cyber Technical 

Plano, TX: $179,400 - $204,700 for Manager, Cyber Technical 

Richmond, VA: $179,400 - $204,700 for Manager, Cyber Technical 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</div>
</div><div>Salary
197,300.00 - 225,100.00 Annual
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Manager Information Security Office (ISO), Enterprise Data

First Abu Dhabi Bank (FAB)

<div>
 
 
 JOB PURPOSE:
 
 
 
 The
 
 
 Manager &ndash; Information Security will be responsible for managing FAB Kuwait&rsquo;s Information Security, Business Continuity and Data Privacy Program. He/She serves as the process owner of the appropriate second-line functional activities related to confidentiality, integrity, availability of Information assets in addition to Data Privacy and Buiness continuity as well third party risk management and physical security in compliance with regulatory requirements.
 
 
 
 
 
 The role will report directly to the Head of Risk &ndash; Kuwait and functionally to the Head of International Information Security at the Group, and shall be responsible to plan, implement, monitor and review the information security program for FAB Kuwait in consultation with Group Information Security Office &ndash; Head office team. The Manager &ndash; Information Security shall ensure the information security program, Data Privacy program and Business Continuity Management Program is in alignment with the regulatory, legal and statutory requirements of FAB Kuwait and the business strategy. The Manager &ndash; Information Security role will be operating out of the FAB Kuwait branch.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 <ul>
 <li>
 Review and Maintain Information Security, Buisness Contnuity and Data Privacy Policies, Standards, and Procedures for FAB Kuwait.
 </li>
 <li>
 Participate in discussions and coordinate activities between local business units, support functions, Compliance Team, IT and GSO &ndash; HO for information security and Data Privacy, related planning, implementations and review.
 </li>
 <li>
 Ensure compliance as per regulatory requirements (all Information Security / Bsiness Continuity/ Personal Data Protection specific regulations applicabe to FAB Kuwait / Third party risk management / Physical security .).
 </li>
 <li>
 Provide regular reporting on the status of information security program, initiatives, security &amp; technology risks and relevant incidents to the executive management.
 </li>
 <li>
 Laise with external agencies such as regulatory/advManager - Information Securityry/law enforcement bodies, as necessary, to ensure that the FAB Kuwait maintains a strong security posture and is kept well abreast of relevant threats identified by these agencies.
 </li>
 <li>
 Review new regulatory legislations; promptly communicate all regulatory notices/circulars to all concerned areas, provide interpretations if necessary; develop/monitor action plans towards its implementation.
 </li>
 <li>
 Assist Head office during Regulatory Examinations; ensure implementation/regularization of observations linked to compliance while meeting the deadline(s).
 </li>
 <li>
 Review Technology Risk Assessments for IT Projects, RCSA , Third party and Facility Risk assessments.
 </li>
 <li>
 Assist and support for Internal and External Audits. Monitor and track all open infosec issues with IT and concerned stakeholders.
 </li>
 <li>
 Oversee the tracking and closure of Security, BCM &amp; Privacy related Audit findings of FAB Kuwait.
 </li>
 <li>
 Govern the security awareness program for FAB Kuwait staff and customers.
 </li>
 <li>
 Provide support to FAB CSIRT and Group Data privacy for information security incident response and personal data breach handling.
 </li>
 <li>
 Provide SLOD oversight and support the business unit on the implementation of business continuity program in line with local regulatory requirements and Group BCM framework practices and RACI.
 </li>
 <li>
 Coordination with Business units/Fraud Risk / GSO for digital forensic investigation.
 </li>
 <li>
 Review and assess the regulatory circulars/notices, discuss with GSO-HO and enforce security controls as applicable.
 </li>
 <li>
 Assist Group Information Security Office&ndash; Head Office team in delivery of information security services to the branch such as vulnerability assessment, penetration testing, SOC monitoring etc.
 </li>
 <li>
 Review Management Dashboards/Security MIS related to Patching, VA, PT, Baselines and end point security controls and highlight risks to the branch executive management.
 </li>
 <li>
 Assess and Review Change Requests and Security Exceptions for FAB Kuwait.
 </li>
 <li>
 Review BRDs, Solution Design, Product Papers from Information Security, Data Privacy and Busines Continuity perspective and any other requirements for FAB Kuwait business units.
 </li>
 <li>
 Review and track compliance for Data Privacy and Protection controls.
 </li>
 <li>
 Review KPI and KRI for country information security processes.
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS &amp; EXPERIENCE:
 
 
 <ul>
 <li>
 Information Security or IT Security or IS Audit background.
 </li>
 <li>
 Must be having a minimum 5-7 years of Information Security Experience.
 </li>
 <li>
 Expert knowledge of Information Security Domains and should be certified (CISA, CISSP or CISM or any other relevant security certification).
 </li>
 <li>
 Experience in a similar type of role in a multinational business and dealing with regulatory authorities, governments and industry bodies.
 </li>
 <li>
 Experience in managing security compliance teams.
 </li>
 <li>
 Knowledge of CBK regulatios on Cyber security, Business continuity, &amp; local privacy regulations.
 </li>
 <li>
 Ability to comply with Data Privacy Policy / procedures, draft / update local Data Privacy Polcies. Review local Business initiatives and SOPs where required, for compliance with Data Privacy Compliance requirements in co-ordination with H.O. Teams.
 </li>
 <li>
 Ability to make good judgments regarding security risk and to prioritize resources and activity around managing those risks.
 </li>
 <li>
 Able to conduct the role independently and with integrity.
 </li>
 <li>
 Ability to plan, organize and prioritize tasks and projects.
 </li>
 <li>
 Good personal communication skills capable of dealing with wide range of stakeholders, including senior management.
 </li>
 <li>
 Fluent (spoken and written) in English, Arabic.
 </li>
 </ul>
</div>

Manager – Information Security - Kuwait

Sacramento Superior Court

<div><div><div><h2 class="jobSectionHeader">Description</h2></div>
<div><div>Under general direction, the Information Security Officer is responsible for the leadership, oversight, and execution of the Court&rsquo;s information security, cybersecurity, privacy, and risk management programs. The Information Security Officer establishes and enforces security governance, policies, and controls to protect the confidentiality, integrity, and availability of Court information systems and data. This position provides strategic security leadership, oversees security operations and incident response, ensures regulatory and Judicial Council of California compliance, manages security risk across enterprise and Software-as-a-Service (SaaS) environments, and advises judicial officers and executive leadership on information security matters.</div></div>
<div><h2 class="jobSectionHeader">Examples of Duties</h2></div>
<div>Duties may include, but are not limited to the following:<ul><li>
Provides enterprise-wide leadership for cybersecurity, information security, and privacy programs.</li><li>
Develops, implements, and maintains the Court&rsquo;s information security governance framework, including policies, standards, procedures, and controls.</li><li>
Establishes and oversees security programs covering network security, application security, cloud and SaaS security, endpoint protection, identity and access management, and data protection.</li><li>
Develops and maintains the Court&rsquo;s short and long-term information security strategy and roadmap, aligned with Court objectives and enterprise architecture.</li><li>
Conducts and oversees security risk assessments, threat modeling, and vulnerability management across on-premises, cloud, and SaaS environments.</li><li>
Ensures security requirements and controls are embedded into system design, procurement, and enterprise architecture decisions.</li><li>
Develops, manages, and monitors the information security budget; oversees procurement and lifecycle management of security tools, services, and SaaS solutions.</li><li>
Conducts vendor security due diligence, including risk assessments, contract security terms, and compliance reviews; ensures third-party vendors and service providers meet Court security, privacy, and data protection requirements.</li><li>
Oversees the Court&rsquo;s security incident response program, including detection, investigation, containment, remediation, and post-incident review.</li><li>
Ensures compliance with Federal Bureau of Investigations (FBI) Criminal Justice Information Systems (CJIS) Security Policy, Internal Revenue Service (IRS) Publication 1075, Judicial Council of California policies, and applicable state and federal data protection requirements.</li><li>
Supports internal and external audits, assessments, and compliance reviews; tracks and remediates findings.</li><li>
Oversees disaster recovery, business continuity, and cyber resilience planning and testing.</li><li>
Advises judicial officers, executive leadership, and management on security posture, risks, incidents, and mitigation strategies.</li><li>
Plans, prioritizes, schedules, assigns, and evaluates work of assigned personnel; assists with interviews and selection; trains and motivates staff; monitors and evaluates staff performance.</li><li>
Coordinates with statewide judicial branch security initiatives, external agencies, and partner courts.</li><li>
Promotes a culture of security awareness, accountability, and compliance across the Court.</li></ul></div>
<div><h2 class="jobSectionHeader">Minimum Qualifications</h2></div>
<div><div>Education: Bachelor&rsquo;s Degree from an accredited college or university in Information Technology, Information Security, Computer Science, or a closely related field.</div><div>
-And-</div><div>
Experience: Five (5) years full-time experience in information security, information assurance, or a closely related field, including responsibility for security governance, compliance, risk management, or security architecture.</div><div></div><div> 
Substitution: Additional relevant full-time information security experience may be substituted for the Bachelor&rsquo;s Degree on a year-for-year basis.</div><div></div><div> 
Certification: Relevant security certifications are highly desirable.</div><div></div><div> 
Preferred certifications include: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Chief Information Security Officer (CCISO), Certified in Risk and Information Systems Control (CRISC), International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 27001 Lead Auditor, or Computing Technology Industry Association (CompTIA) Security+.</div><div></div><div> 
CJIS training and cloud security certifications, including Amazon Web Security (AWS) Security, Azure Security Engineer, and Google Cloud Security, are also valued.</div><div> 
Knowledge of:</div><div></div><div> 
Information security governance, risk management, and compliance frameworks (National Institute of Standards and Technology (NIST) Cybersecurity Framework, NIST 800-53, ISO 27001, Center for Internet Security Critical Security Controls (CIS Controls); federal and state data security standards, particularly FBI CJIS Security Policy, IRS Publication 1075, and Judicial Council of California information security policies; security incident detection, response, and forensic processes; enterprise security architecture, including identity and access management, network security, endpoint protection, encryption, and logging/monitoring; cloud and SaaS security models, shared responsibility frameworks, and third-party risk management; vulnerability management, threat modeling, and risk assessment methodologies; security budget development, procurement processes, and vendor risk management in public sector environment; principles and practices of supervision, training, staff development and performance management; principles and practices of effective team building, team leadership and conflict resolution; design, installation and maintenance of enterprise, distributed systems to courts, state agencies or other hosted court community; networking functions from network hardware and software vendors and products, network security policies, techniques and procedures, network documentation, configuration, maintenance and diagnostic procedures and techniques; internet and intranet architecture; development of long and short-term strategic initiatives for the enterprise organization; principles and practices of technical problem solving; principles, processes and techniques of project management and related software; designing disaster recovery solutions, including planning, implementation and testing; principles, practices and techniques of providing customer service; change management principles and practices.</div><div></div><div> 
Ability to:</div><div></div><div> 
Plan, organize and supervise the work of information security and information technology staff; provide leadership and direction to a professional and technical group of staff; motivate, train, coach, evaluate and discipline staff; establish, monitor and control projects and schedules to meet goals and objectives; translate complex security risks into business impact for judicial officers, executive leadership and non-technical stakeholders; understand highly complex information technology systems and issues; identify and articulate security problems and recommend documented solutions; establish and maintain effective and cooperative working relationships with judicial officers, executive leadership, court staff, vendors, and external agencies; communicate effectively both orally and in writing; promote and maintain a team environment; understand the Court&rsquo;s strategic business objectives as they relate to information security.</div></div> 

<div><h2 class="jobSectionHeader">Other Information</h2></div>
<div>Must be able to pass a criminal history background check. 
 
Possession of a valid California driver&rsquo;s license or the ability to utilize an alternative method of transportation when needed to carry out job-related essential functions.</div></div></div>

Information Security Officer - IT Division

Raytheon

<div>Date Posted:
2026-04-14
Country:
United States of America
Location:
US-CA-EL SEGUNDO-E07 ~ 2012 E El Segundo Blvd ~ BLDG E07
Position Role Type:
Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance Type:
DoD Clearance: Top Secret
Security Clearance Status:
Active and existing security clearance required on day 1
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling &ndash; to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today&rsquo;s mission and stay ahead of tomorrow&rsquo;s threat. Our team solves tough, meaningful problems that create a safer, more secure world.
As a COMSEC Manager you will be managing Communications Security (COMSEC) across various environments, following National Security Agency (NSA) and external customer guidelines. You will be based at our El Segundo facility, working on site, providing critical COMSEC support and overseeing daily operations for Collateral, SAP, and Sensitive Compartmented Information (SCI) programs. Your attention to detail, time management skills, and organizational skills, with proper follow-through will be essential to your success as a COMSEC manager. Extensive understanding of the NSA CSSM Policy 3-16 or other agency COMSEC doctrine and their associated references will be utilized daily. This position requires occasional local travel to other locations and close collaboration with other departments within Raytheon. At times You must be able to perform regular moderate lifting (approximately 25 &ndash; 40 pounds)
What You Will Do<ul><li>
Prepare and load In-Line-Network (INE) encryptors and secure voice products.</li><li>
Submit accurate and timely accounting reports to the NSA Central Office of Records (COR) or another assigned COR.</li><li>
Order, receive, and maintain COMSEC equipment and encryption keys,</li><li>
Track supersession dates, and performing software upgrades.</li><li>
Perform regular inventories, compliance validations, and incident reporting and investigations as necessary.</li></ul>
Qualifications You Must Have<ul><li>
A University Degree or equivalent experience and minimum 5 years prior relevant experience, or An Advanced Degree in a related field and minimum 3 years experience</li><li>
Experience with Microsoft products.</li><li>
Experience working with DoD and NSA.</li><li>
Experience supporting COMSEC activities.</li></ul>
Qualifications We Prefer<ul><li>
Previous NSA COMSEC certification.</li><li>
Experience working in an SAP/SCI environment.</li><li>
Experience with COMSEC Accounting, Distributed INFOSEC Accounting System (DIAS) Reporting &amp; Distribution System (CARDS).</li><li>
Experience with troubleshooting COMSEC equipment.</li><li>
Experience in the management of Windows based information systems.</li><li>
Knowledgeable of legacy COMSEC equipment.</li></ul>
What We Offer<ul><li>
Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Safety, Trust, Respect, Accountability, Collaboration, and Innovation.</li><li>
This position is not eligible for Relocation assistance</li></ul>
Learn More &amp; Apply Now!<ul><li>
Please consider the following role type definition as you apply for this role. Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.</li></ul>
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 95,500 USD - 181,700 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.
Privacy Policy and Terms:</div>

Alt COMSEC Manager-El Segundo, CA

Search 10000+ Information security manager jobs near you this June. New roles added regularly across leading industries. Apply today.