Information Security Manager

The Vertex Companies LLC; United States; On-site; USD 80,000 - 299,000; Full time

Benefits offered by this job

401(k) plan with immediate matching

Flexible Spending Accounts

Tuition reimbursement for advanced education

Job summary

The Vertex Companies LLC is seeking an Information Security Manager to lead its global Information Security Program with a focus on compliance and innovative security solutions...

The role involves overseeing daily security operations, managing vendor relationships, and ensuring the effectiveness of security controls across the organization. Ideal candidates should have a strong operational background in security management.

Qualifications

• 8 years of related experience or equivalent education/experience.
• Experience managing enterprise security programs.
• Hands-on experience with security controls and compliance initiatives.

Responsibilities

• Lead the operation of the Information Security Program.
• Manage relationships with security vendors and SOC providers.
• Oversee incident response activities and compliance initiatives.

Skills

Microsoft 365 E5 security

Security operations

Incident response

Vulnerability management

Risk management

Cloud security

Third party risk management

Strong communication skills

Education

Bachelor's degree

Master's degree

Tools

SIEM platforms

SOC/SIEM platforms

Job description

Company Description

The Vertex Companies, LLC (VERTEX) is a $180M global consulting firm that integrates strategic advisory, project management, and dispute resolution services for organizations facing complex challenges in a world of risk. We embody our core values of embracing lifelong learning, operating with urgency, maximizing value, and driving collaboration to better outcomes for our clients, colleagues, and communities. Join us if you are looking for a career that offers you a chance to love what you do and deliver meaningful impact.

Job Description

Vertex is seeking a highly driven and hands‑on Information Security Manager to lead and manage the company’s overall Information Security Program. This role requires a strong operator and execution‑focused leader who can both strategically execute security initiatives and actively drive implementation across the organization. The ideal candidate is someone who can independently lead initiatives, coordinate across business and IT teams, hold vendors accountable, and ensure security controls are effectively implemented, monitored, and continuously improved. This role will work in collaboration with CTO/CISO, business stakeholders, external vendors, managed security providers, and compliance partners to strengthen the company’s security posture while supporting operational and business objectives.

Core Responsibilities

Work Product Creation, Project Management, Coordination with Team Members, Operations

• Lead the day-to-day operation and continuous improvement of the company’s Information Security Program.
• Strong hands‑on experience implementing and managing enterprise security controls across the Microsoft 365 E5 security ecosystem.
• Hands‑on experience implementing and managing Data Loss Prevention (DLP), CASB, Zero Trust, Conditional Access Policies, EDR/XDR, Vulnerability management and network security.
• Proven experience designing, implementing, and operationalizing Security Information and Event Management (SIEM) platforms, including alert tuning, log correlation, incident investigation, automation, and response workflows.
• Partner with IT leadership and business stakeholders to implement and operationalize security controls across systems, applications, endpoints, cloud services, and infrastructure.
• Maintain and enforce information security policies, standards, procedures, and guidelines aligned with business and compliance requirements.
• Track security risks, vulnerabilities, remediation plans, and mitigation activities across the organization.
• Oversee day-to-day security operations, including monitoring, alert management, escalation, and response coordination.
• Manage relationships and operational performance of external SOC/MDR providers and security vendors.
• Review, tune, and optimize security alerts, detection rules, and monitoring configurations to reduce noise and improve effectiveness.
• Lead and coordinate incident response activities, including investigation, containment, remediation, recovery, and post‑incident reviews.
• Coordinate tabletop exercises and security testing activities.
• Lead third‑party risk management program by conducting security reviews of vendors, SaaS platforms, and technology partners by reviewing SOC reports, security questionnaires, risk findings, and remediation plans.
• Lead and support compliance initiatives including SOC 2, GDPR, privacy, and other regulatory/security frameworks.
• Coordinate audit readiness activities, evidence collection, remediation tracking, and compliance reporting.
• Work cross‑functionally to ensure security controls are properly documented, implemented, and operating effectively.
• Support security awareness and education initiatives across the organization.

Qualifications & Competencies

• Bachelor's degree and 8 years of related experience, a Master's degree and 6 years of related experience, or 11 years of related experience and no degree.
• Experience managing or supporting enterprise security programs and day‑to‑day security operations.
• Strong hands‑on experience with security monitoring, incident response, vulnerability management, and risk management.
• Experience working with SOC/SIEM platforms, MDR/SOC providers, and cloud security technologies.
• Hands‑on experience supporting compliance initiatives such as SOC 2, GDPR, HIPAA, or similar frameworks.
• Experience conducting third‑party/vendor security risk assessments.
• Experience partnering closely with Infrastructure, Cloud, and IT Operations teams to implement security controls.

Knowledge & Skills

• Hands on Microsoft 365 E5 / Azure security technologies
• Security operations and SIEM management
• Incident response and investigation
• IAM, DLP, CASB, Zero Trust, Cloud Security , Data classification & vulnerability management
• Endpoint security and vulnerability management
• Cloud and SaaS security
• Third party risk management
• Strong execution and project‑driving capability.
• Ability to independently manage priorities and push initiatives to completion.
• Strong communication and stakeholder management skills.
• Ability to work effectively across technical and non‑technical teams.
• Strong analytical, organizational, and problem‑solving skills.
• Comfortable operating in fast‑paced and evolving environments.

Preferred Certifications

• CISSP
• CISM
• Security+
• ISO 27001 Lead Implementer/Auditor
• GIAC certifications
• Microsoft Security certifications

Additional Information

At VERTEX, we invest in top talent with a highly competitive total compensation package that rewards performance and supports long‑term success. Total compensation includes a base salary and a discretionary variable bonus program, depending on your level. Our comprehensive benefits package offers multiple healthcare and dental plan options, as well as company‑paid Life Insurance, Short‑Term Disability, and Long‑Term Disability coverage—ensuring peace of mind for you and your family.

We offer a 401(k) plan with immediate matching and full vesting, empowering employees to build financial security from day one. Additional benefits include Flexible Spending Accounts, a robust Employee Assistance Program, and a suite of exclusive perks that enhance everyday life.

At The Vertex Companies, our salary ranges are intentionally designed to support meaningful career growth over time. These ranges allow employees to develop, expand their impact, and increase their earnings as they progress within their job level. A new hire’s starting compensation is determined by their experience, geographical location, scope of the role at the time of hire, and Company affordability. Our ranges are structured to reward growth and performance, ensuring there is room for advancement and long‑term opportunity.

Time away matters - so we provide a generous paid time off program, including vacation, sick time, and paid holidays (with prorated options for eligible part‑time employees).

At VERTEX, growth never stops. Our signature "Lifetime of Learning" program offers tuition reimbursement and personalized support for employees pursuing advanced education—helping you sharpen your skills and accelerate your career.

Salary Ranges For This Role Are As Follows

$109,000 - $299,000 USD annually (Geographical Tier AA - Sample Locations: NY Metro, San Franscisco, San Jose, Seattle)

$101,000 - $276,000 USD annually (Geographical Tier A - Sample Locations: Irvine CA, Middlesex NJ, Tacoma WA, Boston, Alexandria)

$92,000 - $253,000 USD annually (Geographical Tier B - Sample Locations - Baltimore, Chicago, Anchorage, Portland)

$84,000 - $230,000 USD annually (Geographical Tier C - Sample Locations - Atlanta, Charlotte, Cincinnati, Miami)

$80,000 - $219,000 USD annually (Geographical Tier D - Sample Locations - Mississippi, Mobile AL, Bowling Green KY, Tulsa)

Notice To Third Party Agencies

Please note that The Vertex Companies employs a fully staffed recruiting team. We do not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Agreement, VERTEX will not consider or agree to payment of any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement, VERTEX explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of VERTEX.