Senior Manager – Information Security

Plume Design, Inc

. Own and mature the information security program aligned with ISO 27001 and SOC 2 requirements, including transition to SOC 2 Type 2 .

Posted 11/4/2026full-timeRemote • United StatesSenior💰 $179,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing and maturing information security programs aligned with ISO 27001 and SOC 2 requirements, with a strong focus on cloud security, risk management, and incident response. Proven ability to lead security teams, develop security policies, and collaborate effectively with cross-functional teams.

Highest-signal resume keywords

ISO 27001 ComplianceSOC 2 Type 2 TransitionCloud Security (AWS/GCP)Security Program LeadershipRisk Assessment and Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityRisk AssessmentSecurity Policy DevelopmentIncident Response PlanningSecure SDLC PracticesVulnerability ManagementAppSec ToolingPenetration TestingControl TestingThreat Modeling

Soft Skills

Excellent CommunicationTeam LeadershipCollaboration

Tools & Technologies

AWSGCPCI/CD Pipeline SecurityKubernetes SecuritySecurity Tooling

Certifications & Qualifications

CISSPCISM

Industry Keywords

SaaS EnvironmentNIST Cybersecurity FrameworkISO 27701

Tech Stack

Tools & technologies

AWSCloudCyber SecurityGoogle Cloud PlatformKubernetesSDLC

About the role

Key responsibilities & impact

Own and mature the information security program aligned with ISO 27001 and SOC 2 requirements, including transition to SOC 2 Type 2
Author, formalize, and maintain security policies, standards, and procedures
Run risk assessments, control testing, audit evidence collection, and remediation tracking
Manage external auditors, penetration testers, and compliance partners
Own security for infrastructure, networks, AWS/GCP cloud environments, and applications
Set strategy and roadmap for IAM, network and cloud security architecture, endpoint protection, vulnerability management, logging/monitoring, and incident response
Establish and improve secure SDLC practices, including threat modeling, secure code review, dependency and supply-chain security, and CI/CD pipeline security
Build incident response plans, run tabletop exercises, and lead responses
Lead, coach, and develop the security team
Define collaboration models with Engineering and Product to minimize friction and rework
Serve as the primary security voice to Engineering, Product, IT, Legal, and executive leadership
Translate security risk into business terms for leadership and the board
Support sales and customer trust efforts through security questionnaires, customer audits, and the trust center
Ensure policies and procedures are operational, team workflows are proactive, SOC 2 Type 2 is on track, security tooling minimizes engineering friction, and incident response is tested

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Computer Engineering or related field or equivalent work experience
6-8+ years in information security
3+ years in a leadership role owning a security program end-to-end
Direct experience operating within ISO 27001 and SOC 2 frameworks
Strong technical depth in cloud security (AWS/GCP), network security, and modern application security
Experience with SDLC and AppSec tooling
Container/Kubernetes security is a plus
Experience building or rebuilding policies and procedures in a scaling SaaS environment
Experience leading security teams
Experience managing external auditors, penetration testers, and compliance vendors
Excellent communication skills
CISSP, CISM, or similar certification is a nice to have
Experience with ISO 27701 and NIST Cybersecurity Framework is a nice to have
No sponsorship is offered

Benefits

Comp & perks

Up to 15% bonus
Equity
401k plan with company match
Basic life insurance
Health benefits
Dental benefits
Vision benefits
Other benefits and perks