Information Security Manager

eNGINE; Pittsburgh (Allegheny County); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Paid training/certifications

Schedule flexibility

Job summary

eNGINE is hiring an experienced Manager, Information Security to lead and advance the organization’s security posture. You will manage network, system, identity, and cloud security, collaborating with IT teams on governance, risk, compliance, and operations across the firm.

You will oversee budgets, vendor relationships, and security operations technologies, and mentor security engineering teams while traveling to other office locations as needed.

Qualifications

• Bachelor's degree or equivalent required.
• 5+ years of security-related experience requested.
• 10+ years of IT experience preferred.
• 3+ years of experience leading security engineering teams.
• Strong knowledge of ISO 27001 and ISO 2771 is preferred.
• Ability to communicate technical risk to non-technical stakeholders.
• Demonstrated ability to manage competing priorities in a dynamic environment.

Responsibilities

• Establish and maintain security governance frameworks and standards.
• Lead risk management initiatives including threat intelligence and risk mitigation.
• Oversee compliance programs (ISO 27001, PCI-DSS) and audits.
• Manage security budgets, vendor relationships, and MSSPs.
• Provide security training and advisory support to IT and leadership.
• Conduct design/architecture reviews across network, systems, identity, and cloud.
• Oversee monitoring, testing, and audit lifecycle management.

Skills

Leadership

Risk management

Security governance

Communication of risk

Budget management

Threat intelligence

Education

Bachelor's degree

CISSP/CISM/CEH/CIPP certification

Tools

Firewalls

EDR/NGAV

SIEM

Vulnerability management

Identity & Cloud security tooling

ISO 27001

PCI-DSS

Job description

eNGINE builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning and engagement with the markets we serve, the talent we represent, and the teams we build. Our Consulting Workforce is encouraged to enjoy career fulfillment in the form of challenging projects, schedule flexibility, and paid training/certifications. Successful outcomes start and finish with eNGINE.

eNGINE is hiring an experienced Manager, Information Security to join our security team and lead efforts to advance our organization's security posture. In this role, you will manage and enhance our network, system, identity, and cloud security capabilities. You will collaborate closely with IT teams to oversee security governance, risk management, compliance, and operations across the organization.

Key Responsibilities:

• Establish and maintain security governance frameworks, including policies, processes, procedures, and standards
• Lead risk management initiatives, including threat intelligence, risk assessment, and mitigation planning
• Oversee compliance programs, including ISO 27001, PCI-DSS, and client assurance audits and questionnaires
• Manage security-related budgets, vendor relationships, and managed security service providers
• Provide security awareness training and advisory support to IT, leadership, and practice groups on emerging threats and best practices
• Conduct design and architecture reviews across network, system, application, identity, and cloud infrastructure
• Direct continual monitoring, testing, and audit lifecycle management, including remediation tracking
• Lead detection and response efforts, including log aggregation, correlation, analysis, and incident response
• Oversee security operations technologies, including firewalls, network segmentation, vulnerability management, EDR/NGAV, SIEM, and email security
• Coordinate and prioritize security projects and continual improvement initiatives

Qualifications:

• Bachelor's degree or equivalent, with a minimum of 5 years of security-related experience
• 10+ years of professional experience in information technology
• Strong background in IT operations, with related network, systems, or development experience
• 3+ years of experience managing technical security engineering teams
• In-depth knowledge of security threats affecting systems, identities, and cloud environments
• Direct experience implementing and maintaining ISO 27001 and ISO 2771
• Proven ability to communicate technical risk to non-technical stakeholders
• Strong organizational skills, with the ability to manage competing priorities in a dynamic environment
• Demonstrated commitment to confidentiality regarding sensitive Firm and personnel information
• Excellent interpersonal skills, with a track record of building collaborative, high-performing teams
• Willingness to travel to other office locations as required

Preferred Qualifications:

• Professional certifications such as CISSP, CISM, CEH, or CIPP (candidates in progress toward certification are encouraged to apply)
• Prior experience within a law firm or professional services environment

No C2C, relocation, referral, or sponsorship candidates for this role.