IT Security Manager

nimble solutions

. Lead day-to-day security operations and engineering .

Posted 9/18/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in leading security operations and engineering, with a strong focus on identity and access management, incident response, and compliance with SOC 2 Type II and HIPAA standards. Proven ability to manage cross-border teams and communicate technical risks effectively to non-technical stakeholders.

Highest-signal resume keywords

Information Security OperationsIdentity And Access ManagementIncident Response Program DevelopmentSOC 2 Type II ComplianceTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability RemediationSecurity Tooling ManagementData-Loss PreventionConditional AccessMulti-Factor AuthenticationPrivileged Access ManagementRole-Based Access ControlIncident Response PlaybooksRisk AssessmentPenetration Testing

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationCoachingPerformance Management

Tools & Technologies

Defender For EndpointSentinelPurviewIntuneEntra ID

Industry Keywords

NIST CSFHIPAAMSSPSOC AuditCross-Border Team Management

About the role

Key responsibilities & impact

Lead day-to-day security operations and engineering
Own security tooling and operations across EDR/XDR, SIEM, data-loss prevention, device compliance, and Conditional Access/Zero Trust controls
Lead the Daily Security Huddle and weekly Vulnerability Management meeting
Drive vulnerability remediation to closure against defined SLAs
Own the identity and access management program, including MFA, Conditional Access, privileged access management, RBAC, and joiner/mover/leaver automation
Serve as the primary internal contact for the MSSP/vCISO on SOC alert triage, escalation, and remediation follow-through
Maintain and improve incident response playbooks and runbooks
Coordinate tabletop exercises and post-incident reviews
Act as a security escalation point for active incidents
Support the annual SOC 2 Type II audit cycle, including evidence collection, control walkthroughs, and auditor liaison
Maintain NIST CSF control documentation and contribute to risk-remediation efforts
Support HIPAA/PHI security controls and periodic risk assessments
Coordinate annual third-party penetration testing and remediation
Manage a cross-border security engineering/operations team spanning U.S. and India-based staff
Own performance management, coaching, bench-strength, and succession planning
Partner with Infrastructure, Workplace Services, and Development leadership on cross-functional security initiatives

Requirements

What you’ll need

10+ years in information security operations or engineering
2+ years in a people-management or team-lead capacity
Hands-on experience with Defender for Endpoint, Sentinel, Purview, Intune, and Entra ID, including Conditional Access, MFA, and PIM
Experience supporting SOC 2 Type II and/or HIPAA compliance programs, including evidence gathering, control testing, and auditor engagement
Experience managing or closely partnering with an MSSP/outsourced SOC
Experience building or maturing an incident response program, including playbooks and tabletop exercises
Comfortable managing distributed, cross-border teams in the U.S. and India
Strong written and verbal communication skills
Ability to translate technical risk into business terms for non-technical stakeholders

Benefits

Comp & perks

Opportunity to join a well-established and market-leading brand in a high-growth end market
Valuable experience working closely with Executive leadership
Positive culture-building environment
Hybrid or remote work arrangement