Head of Information Security & Risk (Hybrid)

Insitu; Bingen (WA); Hybrid; USD 133,000 - 183,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Job summary

Insitu in Washington state is seeking a strategic and hands‑on Manager of Information Security to advance our security posture and cyber risk management. You will lead cross‑functional teams, translate regulatory requirements into architectures, and drive resilience and incident response across the organization.

The role covers threat intelligence, vulnerability management, audits, and collaboration with legal, IT, engineering, and leadership.

Qualifications

• Bachelor’s degree in information security, cybersecurity, computer science, information systems, or related field.
• 3–5 years of progressive information security, cybersecurity, IT governance, or risk management experience.
• Hands‑on experience with common security technologies (e.g., Firewalls, SIEM, IDS/IPS, VPNs, NACs, EDR, IAM).
• Deep knowledge of IT infrastructure, networking, and cloud environments.
• Experience in highly regulated industries such as defense, aerospace, or government.

Responsibilities

• Develop and implement an enterprise‑wide information security strategy aligned with business objectives.
• Oversee security operations including threat intelligence, vulnerability management, and incident response.
• Maintain security frameworks and policies (NIST, RMF, CMMC) and ensure regulatory readiness.
• Lead selection and management of security technologies (firewalls, SIEM, IAM, encryption).
• Coordinate third‑party cyber risk management and vendor assessments.

Skills

Security strategy

Risk management

Leadership

Cross-functional collaboration

Cloud & on‑prem

Education

Bachelor's degree in information security

Tools

Firewalls

SIEM

EDR

VPNs

NACs

IAM

Job description

Insitu in Washington state is seeking a strategic and hands‑on Manager of Information Security to advance our security posture and cyber risk management. You will lead cross‑functional teams, translate regulatory requirements into architectures, and drive resilience and incident response across the organization.

The role covers threat intelligence, vulnerability management, audits, and collaboration with legal, IT, engineering, and leadership.