IT Security Manager

Foley

. Lead security improvements across AWS, including IAM, multi-account governance, networking, and security monitoring .

Posted 11/6/2026full-timeUnited StatesSeniorLead💰 $110,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading security initiatives, managing identity and access controls, and ensuring compliance with SOC 2 Type II and PCI DSS standards. Proficient in optimizing security platforms and implementing robust security measures across AWS and endpoint environments.

Highest-signal resume keywords

AWS Security ExperienceMicrosoft Entra ID ManagementSOC 2 Type II Audit OwnershipIncident Response ManagementVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IAMMulti-Account GovernanceNetwork SecurityEndpoint SecurityVulnerability ManagementIncident ResponseSecurity MonitoringData ProtectionScriptingAutomation

Soft Skills

Strong Communication SkillsProactive Risk Identification

Tools & Technologies

Rapid7IntuneNinjaOneGuardDutySecurity HubCloudTrail

Certifications & Qualifications

CISSPCCSPAWS Certified Security – SpecialtyMicrosoft SC-Series

Industry Keywords

SOC 2 Type IIPCI DSSNIST CSFISO 27001CIS Controls

Tech Stack

Tools & technologies

AWS

About the role

Key responsibilities & impact

Lead security improvements across AWS, including IAM, multi-account governance, networking, and security monitoring
Manage identity and access controls through Microsoft Entra ID, Conditional Access, SSO/SCIM, and privileged access management
Maintain and strengthen endpoint security, patching, EDR coverage, and security monitoring across the managed fleet
Optimize Rapid7, Intune, NinjaOne, and related security platforms
Own vulnerability management from detection and prioritization through remediation
Lead incident response, coordinate with the MDR provider, and drive corrective actions
Partner with AI and Engineering teams to secure AI tools, agents, and integrations
Implement guardrails for data protection, access permissions, non-human identities, and responsible AI adoption
Own Foley's SOC 2 Type II audit process end to end, including security controls, evidence collection, audit readiness, remediation, and external auditor coordination
Maintain PCI DSS compliance requirements and support security policies and vendor risk assessments
Partner with Engineering to strengthen security across development environments, CI/CD pipelines, source control, and application integrations
Monitor emerging threats, evaluate security risks, and drive improvements
Develop and execute a prioritized security roadmap with the Director of Infrastructure
Manage and develop one security engineer
Partner across Infrastructure, Engineering, Compliance, Legal, and business teams

Requirements

What you’ll need

7+ years of information security experience, including experience leading security initiatives or programs and managing or formally leading security professionals
Strong hands-on AWS security experience, including IAM, multi-account governance, network security, GuardDuty, Security Hub, and CloudTrail
Deep experience with Microsoft Entra ID, Conditional Access, SSO/federation, privileged access, and identity lifecycle management
Demonstrated experience with endpoint security, vulnerability management, incident response, and MDR/SOC partnerships
Proven experience owning SOC 2 Type II audits end to end, including control implementation, evidence collection, audit coordination, and remediation
Working knowledge of AI security risks, including data leakage, over-privileged agents, non-human identities, and secure AI integrations
Proactive approach to identifying risks, recommending solutions, and driving improvements independently, with strong communication skills across technical and business audiences
Preferred: Experience with PCI DSS and security frameworks such as NIST CSF, ISO 27001, and CIS Controls
Preferred: Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or Microsoft SC-series
Preferred: Scripting, automation, or infrastructure-as-code experience
Preferred: Experience securing a distributed workforce in a lean or regulated environment
Must be based in one of the listed U.S. states
Must be legally authorized to work in the United States
Must not require employment visa sponsorship

Benefits

Comp & perks

Bonus
Medical coverage
Dental coverage
Vision coverage
401(k) with company match
Paid time off and holidays
Wellness programs
Employee assistance program