Information Security Manager

NEPSE Trading; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

The Wisconsin Foundation and Alumni Association seeks an Information Security Manager to lead the security program across governance, risk, and operations, and to drive automation and an enterprise security culture.

This role provides people leadership and technical oversight, partnering with senior leaders to align security with business priorities and oversee incident response, vulnerability management, and security training.

Qualifications

• Experience leading security programs across enterprise environments.
• Knowledge of HIPAA, PCI-DSS, NIST frameworks and audits.
• Strong people leadership and ability to influence security culture.

Responsibilities

• Lead governance, risk, and compliance for the organization.
• Oversee security operations, incident response, and vulnerability management.
• Drive security policy development, training, and third-party risk management.
• Partner with leadership to translate priorities into actionable roadmaps and standards.

Skills

Security Leadership

Cybersecurity Strategy

Security Operations

Risk & Compliance

Threat Intelligence

Incident Response

Vulnerability Management

Vendor Security

Change Management

Auditing & Governance

Job description

## About the roleOverview The Wisconsin Foundation and Alumni Association (WFAA)\\*, the private fundraising and alumni relations organization for the University of Wisconsin-Madison is seeking an Information Security Manager to join the Information Technology department! The Information Security Manager is responsible for leading and continuously improving the security posture, day-to-day operations, security engineering, incident response, vulnerability management, and governance, risk, and compliance (GRC) functions, and executing the organization's strategic direction. This role is also highly focused on operational excellence, a security-first culture, and a strong mandate to drive automation and AI adoption across security operations.This position provides direct people leadership and technical oversight across the security program, recommending and setting standards and metrics to ensure a resilient and proactive and effective security posture. The Information Security Manager partners closely with the Sr. Managing Director, Infrastructure & Security, Infrastructure & Security team members, and other stakeholders to translate organizational priorities into actionable security roadmaps, ensuring consistent operational excellence across all security functions, and to develop the engineers and administrators within the team.The ideal candidate combines deep technical credibility in cybersecurity with proven people management skills, strong judgment under pressure, and the ability to influence security culture and provide security education across technical and non-technical teams. Please note: We are open to hiring for this position to work remotely, with periodic travel to Madison expected throughout the year. Remote candidates must reside in one of the following states to be considered: Arizona, Colorado, Illinois, Iowa, Minnesota, New Mexico, New York, Texas, or Wisconsin.We believe that private support grows out of good relationships between campus leaders, faculty and program staff who need support, and the alumni and friends who want to invest in UW-Madison. We provide important engagement opportunities to link UW-Madison alumni to each other and to their alma mater, building a strong community of Badgers. Diversity and Inclusion: Just as the university community### benefitsfrom differing viewpoints, perspectives, and experiences, inclusion and diversity are imperative for the success of our mission. WFAA values people and the differences that they bring to the organization, and creates an environment in which all staff members and constituents feel respected and have opportunities to thrive. Essential Functions Security Governance, Risk & Compliance Lead and oversee the compliance with regulatory frameworks and internal policy### requirementsincluding HIPAA, PCI-DSS, and NIST. Ensure consistent application of security patches, vulnerability remediation, access controls, and configuration hardening across endpoints, servers, cloud workloads, and network environments. Lead and oversee vulnerability management efforts, risk assessments, and compliance audits, ensuring findings are prioritized and remediated in alignment with business risk tolerance.Oversee the development and maintenance of security policies, standards, and procedures across the organization. Lead or oversee penetration testing efforts and coordinate remediation of identified vulnerabilities. Oversee third-party risk management processes, ensuring vendor security practices are evaluated and contractual security requirements are enforced.Promote a culture of security accountability and risk-informed decision-making across technical and business teams. Lead and oversee the security awareness training program for the organization. Strategic Direction & Stakeholder Management Partner with the Sr.Managing Director, Infrastructure & Security to define and execute the strategic roadmap for the organization's security program. Translate organizational and business priorities into actionable project plans, resourcing decisions, and operational standards. Provide architectural and operational oversight for security initiatives, ensuring alignment with infrastructure standards, compliance requirements, and scalability needs.Serve as an escalation point and primary liaison with external security vendors, Managed Detection & Response (MDR) providers, third-party security partners, overseeing service deliver, performance and SLA compliance. Stay current with industry trends, emerging threats, threat intelligence, and vendor roadmaps to inform security strategy, tooling, and investment decisions. on team performance, project status, capacity, security posture and risk to the Sr. Managing Director and other stakeholders, including budget and resourcing recommendations.Drive cross-functional collaboration with other Infrastructure & Security teams on security requirements and shared initiatives. Security Optimization, Automation & AI Enablement Oversee the day-to-day operations of the Security team, ensuring a reliable, proactive, and high-performing security program across the organization's technology environments. Ensure timely triage, escalation, and resolution of security incidents, acting as an escalation point for complex or high-impact security events.Review and approve security changes, ensuring adherence to change management practices and minimizing operational and security risk. Oversee root cause analysis, post-incident reviews, and remediation planning for significant security incidents, breaches, or degradations. Ensure incident response plans, disaster recovery procedures, and business con## Required skillsInformation Security ManagerCybersecurity ManagerSecurity ManagerSecurity Operations ManagerIT Security ManagerInformation Systems Security ManagerInformation Security Risk ManagerInformation Security Compliance ManagerInformation Security ManagementLocation: United States