Hybrid Information Security Manager — ISMS & Risk Leader

Triplenet Technologies; Seattle (WA); Hybrid; USD 90,000 - 124,000; Full time

Job summary

Triplenet Technologies in Downtown Seattle (Hybrid) seeks an Information Security Leader to guide governance, develop the ISMS with regional SMEs, and oversee risk management. You will drive security strategy, coordinate with partners, and lead incident response efforts to protect critical payment systems.

The role demands expertise in ISO 27001/2, PCI DSS, and cloud security with strong leadership and communication skills. Hybrid work setup in Seattle area.

Qualifications

• Enterprise-level information security plans, policies, standards, guidelines, methods, and practices based on current industry standards.
• Information Security Management Systems, and applicable industry standards (ISO 27001/2).
• Pertinent federal, state, and local laws, codes, and regulations; particularly those that affect information security for payment systems.
• Environments subject to the Payment Card Industry Data Security Standard (PCI DSS), including compliance-related duties.
• Knowledge and understanding of developing and administering information-security standards, practices, audits, risk management, and policy compliance.
• Information Security Audit principles and practices.
• Knowledge of governance frameworks such as COBIT 5, ISO, NIST, or COSO.
• Strong understanding of IT Service Delivery (ITIL) core processes and methodologies.
• Principles, methods, and techniques used in managing projects and leading teams.
• Security engineering, system and network security, authentication and security protocols, cryptography.
• Knowledge of cloud platforms such as Azure/AWS and relevant security controls.
• Collaborative relationships with staff, management, vendors, and other stakeholders.
• Documenting risks, recommendations, and incident data to stakeholders.
• Interpreting and administering information security policies and procedures.

Responsibilities

• Guide security policy and participate in broader Information Security governance efforts.
• Develop and maintain the Information Security Management System (ISMS) in collaboration with regional information security SMEs and technical consultants.
• Oversee and manage the ISMS and recommend appropriate mitigating controls.
• Oversees Information Security Risk Management activities, including risk identification, assessment, and communication to relevant interest holders.
• Provide metrics and leadership to the Joint Board executive leadership, including risk score reports and guidance on information security topics.
• Facilitate a committee of Information Security SMEs across the Agencies to ensure regional compliance.
• Collaborate with Systems Integrator and vendors to ensure security requirements are incorporated into core payment system design and sustainment.
• Conduct regular security reviews and threat modeling; advise on security enhancements.
• Support external IT security audits and assessments.
• Develop and conduct information security training programs to support ISMS objectives.
• Manage approvals for IAM and Access Control Administration.
• Act as Incident Commander for Security Incident Response activities and oversee plans when invoked.
• Participate in incident investigation and root-cause analysis; prepare incident reports.
• Evaluate changes for potential impacts to Information Security and input to Change Management.
• Coach ROOT information security personnel as ISMS matures.
• Keep up to date on latest information security trends and countermeasures.

Skills

Information security governance

ISMS management

Risk management

Incident response leadership

Security metrics reporting

Threat modeling

Cloud security (Azure/AWS)

Security auditing

Tools

GRC tools

Job description

Triplenet Technologies in Downtown Seattle (Hybrid) seeks an Information Security Leader to guide governance, develop the ISMS with regional SMEs, and oversee risk management. You will drive security strategy, coordinate with partners, and lead incident response efforts to protect critical payment systems.

The role demands expertise in ISO 27001/2, PCI DSS, and cloud security with strong leadership and communication skills. Hybrid work setup in Seattle area.