Hybrid Information Security Manager: Lead Cloud Security & Compliance

Red Ventures; Charlotte (NC); Hybrid; CAD 207,000 - 318,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Disability Insurance

Flexible Spending Accounts

Holiday Pay

401(k) with match

Employee Assistance Program

Parental Benefits

Generous PTO

Job summary

Red Ventures is seeking an Information Security Manager to lead risk reduction and own the security program across multiple lines of business. This player‑coach role partners with engineering to remediate, review architecture, and enforce cloud security standards in AWS at scale.

You will drive vulnerability management, compliance programs (PCI, SOC 2, ISO 27001, NYDFS), and bridge communications with Legal, Finance, and BU leaders to translate risk into action.

Qualifications

• 7+ years of security engineering, cybersecurity, or tech risk with ownership of a vulnerability management or technical risk‑reduction program.
• Hands‑on AWS security experience at scale.
• Experience leading technical teams, including architecture reviews with engineering teams.
• Working knowledge of risk and control frameworks (NIST, ISO 27001).
• Working familiarity with incident response and detection engineering.
• Strong stakeholder influence skills, with the ability to lead without authority.

Responsibilities

• Lead vulnerability management and risk reduction across cloud and code environments, partnering with engineering teams to prioritize and close high-impact findings.
• Own architecture review for new systems and major changes: read cloud configurations and IAM policies, guide engineers through remediation.
• Set and enforce security architecture practices across AWS environment, evaluating design decisions and identifying gaps.
• Translate technical risk into terms BU leaders, Engineering, Finance, and Legal will act on, building trusted relationships across the portfolio.
• Maintain familiarity with incident response and detection engineering practices, partnering with engineers who own day-to-day detection and response.
• Leverage automation and AI tooling to reduce manual security and compliance workflows within the first year.
• Oversee compliance programs across PCI, SOC 2, ISO 27001, and NYDFS; own policy exception program and vendor/third-party risk management.

Skills

Vulnerability management

Security architecture

Cloud security (AWS)

Automation / AI tooling

Risk communication

People leadership

Incident response familiarity

Compliance programs (PCI, SOC 2, ISO 2

Tools

AWS

Job description

Red Ventures is seeking an Information Security Manager to lead risk reduction and own the security program across multiple lines of business. This player‑coach role partners with engineering to remediate, review architecture, and enforce cloud security standards in AWS at scale.

You will drive vulnerability management, compliance programs (PCI, SOC 2, ISO 27001, NYDFS), and bridge communications with Legal, Finance, and BU leaders to translate risk into action.