Senior Manager, Information Security

Description

WHAT WE NEED YOU TO DO

• Evaluate the organization’s existing information security program and develop a strategic plan for improvement in a rapidly growing deep tech environment
• Work with business leaders to establish security priorities aligned with the business objectives and compatible with risk tolerance
• Provide expert guidance to leadership on security risks, trade-offs and investments

• Own and continuously improve the organization’s incident response capabilities
• Lead coordination and response during security events
• Conduct post-incident reviews and drive improvements across systems and processes

• Evaluate, onboard, and manage a third-party MDR provider (e.g., Arctic Wolf or equivalent)
• Define alerting, escalation, and response workflows in collaboration with IT
• Ensure effective monitoring across endpoints, identity systems, and infrastructure

• Define and maintain baseline security standards across:
• Identity and access management
• Endpoint protection
• Logging and monitoring
• Partner with IT to implement controls in a scalable and operationally practical way
• Provide security input into infrastructure and system design decisions
• Define and run a vulnerability management program (asset coverage, scanning, prioritization, remediation tracking, and patch governance) in partnership with IT

• Establish and enforce identity security practices, including MFA and conditional access
• Define access models and privileged access controls
• Oversee governance of external/guest identities and third-party access

• Maintain a security risk register and prioritized remediation roadmap
• Provide regular reporting to senior leadership on security posture, risks, and priorities
• Support customer, partner, and regulatory security requirements as needed
• Own and maintain security policy, standards, and exception/risk acceptance governance processes
• Establish and manage a third-party/vendor risk management process

• Work alongside the IT team to implement security controls and improvements
• Establish clear separation of responsibilities between security and IT operations
• Contribute to a culture of shared accountability, transparency, and continuous improvement
• Own and maintain our security awareness and training program (onboarding, annual refreshers, and phishing simulations)

WHAT YOU BRING TO OUR TEAM

• 10+ years in information security, IT security, or related roles
• Demonstrated experience building, leading, or maturing a security program in a mid-sized organization
• Strong hands-on experience with:
• Microsoft 365 / Entra ID security
• Endpoint detection and response (EDR/XDR) platforms
• Incident response and forensic workflows
• Experience selecting and managing MDR/SOC providers
• Proven ability to operate independently and influence cross-functional teams

• Experience in hybrid IT environments (cloud + on-prem)
• Familiarity with security frameworks (NIST CSF, ISO 27001, CIS)
• Background in infrastructure, systems, or DevOps prior to specializing in security
• Experience partnering with senior leadership teams

• Security program roadmap established and aligned with key stakeholders
• MDR provider onboarded and fully integrated into operations
• Baseline security controls and monitoring coverage established
• Incident response process formalized and exercised
• Strong effective partnership established with IT team and stakeholders

WHY YOU SHOULD WORK WITH US

• Work closely with some of the brightest innovators in quantum technologies to drive breakthroughs that redefine computing
• Enjoy a fast-paced and fun environment where you can try new things while solving innovative challenges every day
• Inclusive company culture that values collaboration
• Regular social events and fun activities keep our global team connected
• Competitive compensation package including base salary, stock options, and relocation assistance for global talent
• Comprehensive benefits including extended health, dental, life, long term disability, an employee assistance program, parental leave top-ups, and a flexible spending account