Information Security Manager

Colas USA; Remote; USD 130,000 - 160,000; Full time

Job summary

A leading infrastructure solutions company is seeking an Information Security Manager to shape their security strategy and manage a team. This position is fully remote and oversees cybersecurity protocols, ensuring compliance and protecting data. The ideal candidate will have extensive experience in information security, strong leadership skills, and relevant certifications. This role requires strategic thinking and effective communication to navigate complex security challenges.

Benefits

Fully remote work

Occasional travel opportunities

Comprehensive benefits package

Qualifications

• Minimum 6 years of information security experience, including 3 years in a leadership role.
• Experience in a matrixed environment within a large organization.
• Deep knowledge of security technologies.

Responsibilities

• Develop and maintain the information security strategy.
• Oversee and enforce security policies and procedures.
• Lead vulnerability management and incident response planning.

Skills

Leadership

Excellent communication

Collaborative mindset

Critical thinking

Time management

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Master’s preferred

Tools

CISSP

CISM

Azure

NIST CSF

CMMC

ISO 27001

Job description

About the Role

Information Security Manager at Colas USA Colas IS Support is the information technology arm of the North America business for Colas and is based in Denver, Colorado. Colas ISS strives to make Colas an industry leader through developing custom mobile applications and business intelligence tools, supporting core applications, maintaining our infrastructure, and much more. Through a partnership with the Colas Companies in the USA & Canada Colas IS Support helps empower our employees for success while also providing direct contact with users and other innovators across the organization.

Wage Range

$130,500 – $159,500 USD (Compensation based on experience)

Key Responsibilities

• Develop, implement, and maintain the information security strategy, ensuring the confidentiality, integrity, and availability of company data and systems.
• Oversee and enforce security policies, procedures, and standards aligned with the NIST Cybersecurity Framework (CSF).
• Recruit, train, and mentor security team members, and manage relationships with external vendors.
• Adapt global security procedures to meet the needs of North American users and systems.
• Champion North American priorities within the global security team, influencing programs and projects.
• Lead vulnerability management, risk assessments, and incident response planning.
• Coordinate North American IT teams during cybersecurity incidents.
• Prepare and present regular reports on security operations and projects to senior management.
• Ensure compliance with relevant laws, regulations, and frameworkse.g., CMMC, privacy and AI laws).
• Oversee audits, analyze gaps, design remediation plans, and ensure closure of actions.
• Help define budgets for security operations and monitor expenses.
• Analyze data to propose security improvements for North American systems.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred).
• Minimum 6 years of information security experience, with at least 3 years in a leadership or managerial role.
• At least 2 years of experience working in a matrixed environment within a large organization.
• Preferred certifications: CISSP, CISM, or equivalent.
• Deep knowledge of security technologies (network, endpoint, email, identity & access management, application, data security).
• Experience with cloud infrastructure security (Azure preferred; OCI, AWS, Google also valued).
• Strong understanding of security frameworks and best practices (NIST CSF, CMMC, ISO 27001).
• Regulatory compliance, risk management, and audit process expertise.
• French language skills are a plus.

Key Soft Skills

• Excellent communication: Able to convey complex security concepts to technical and non‑technical audiences.
• Collaborative mindset: Works effectively with cross‑functional teams.
• Leadership: Guides and mentors team members, manages vendors, and influences decision‑making.
• Critical thinking and business acumen: Balances cybersecurity strategy with business goals.
• Time management and empathy: Prioritizes tasks and fosters a security‑conscious culture.

Additional Details

• Remote work: Fully remote within the continental United States.
• Travel: Occasional travel may be required, including international trips.
• Employment requirements: Must be legally authorized to work in the United States. Pre‑employment criminal background check and drug screening required.
• Physical requirements: Prolonged computer use, basic hand‑eye coordination, and occasional travel.

EEO Statement

Colas Inc. and its subsidiaries are an equal opportunity employer. For details on the specific commitment, please view the EEO document. If you are an individual with a disability and require a reasonable accommodation to:

• meet the requirements of the role in which you are applying
• complete any part of the application process
• access or use the online application process and need an alternative method for applying

Please contact Colas Inc. at 973‑290‑9082 or send an email to [e-mail].