Information Security Manager

OSavul, Inc.; Stati Uniti; Remoto; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote work

Unlimited time-off

Descrizione del lavoro

OSavul, Inc. is seeking an Information Security Manager to own security posture, define strategy, implement controls, and lead a security culture as we scale.

You will report to the CEO and collaborate with leadership and engineering to embed security across product development. This role is fully remote in the United States and offers autonomy to shape the security function while overseeing audits such as ISO 27001 or SOC 2.

Competenze

• 5+ years of hands-on information security experience.
• Leadership experience coordinating security initiatives.
• Experience in incident response and incident analysis.
• Hands-on experience with security tooling such as SIEM, EDR, or MDM.
• Working knowledge of security frameworks such as ISO 27001, SOC 2, or NIST.
• Experience securing cloud infrastructure and distributed remote teams.
• Experience running security awareness training.
• High level of independence and ownership.
• Ability to both define security strategy and implement it yourself.
• Upper-Intermediate English (B2+) or higher.

Mansioni

• Audit our current security posture and define the security strategy and roadmap.
• Own Osavul’s information security end-to-end and decide what to implement and when.
• Lead our security certification work (ISO 27001, SOC 2, etc.).
• Roll out company-wide security practices such as MFA, access control and a password manager.
• Set up and manage company devices (MDM) including firewalls and automatic updates.
• Set up and run security tooling such as SIEM, and lead incident detection, response and analysis.
• Write, maintain, and enforce security policies and procedures.
• Run risk assessments and vulnerability management across our infrastructure, product, and remote team.
• Detect and stop threats early, from phishing to advanced corporate espionage.
• Run security awareness training for the team.
• Work closely with engineering to bake security into product development.

Conoscenze

Security leadership

Incident response

Security operations

SIEM/EDR/MDM

ISO 27001/SOC 2/NIST

Cloud security

Security awareness training

Strategy & implementation

English communication

Strumenti

SIEM

EDR

MDM

Descrizione del lavoro

Are you passionate about safeguarding countries, societies, and businesses from hybrid threats?

Our rapidly scaling company is committed to this mission, collaborating with some of the world’s most influential organizations, including NATO and the EU.

If you’re ready to join a high-impact team shaping the future of intelligence and security, we invite you to become part of our journey. Join us and help defend the digital world with purpose and innovation!

Role Overview

As our Information Security Manager, you’ll take ownership of information security at Osavul and report directly to the CEO.

You’ll assess and strengthen our security posture, define the strategy and roadmap, and drive its implementation. You’ll be both the strategist and the operator: shaping policies, configuring and running security tools, and building a strong security culture across the team.

This role suits a hands-on security professional with leadership experience who wants to own and shape a security function as the company grows.

Key Responsibilities

• Audit our current security posture and define the security strategy and roadmap.
• Own Osavul’s information security end-to-end and make the key decisions on what we implement and when.
• Lead our security certification work (ISO 27001, SOC 2, etc.).
• Roll out company-wide security practices such as MFA, access control and a password manager, and make sure the team actually uses them.
• Set up and manage company devices (MDM), including firewalls, application restrictions, and automatic updates.
• Set up and run security tooling such as SIEM, and lead incident detection, response and analysis.
• Write, maintain, and enforce security policies and procedures.
• Run risk assessments and vulnerability management across our infrastructure, product, and remote team.
• Detect and stop threats early, from phishing and social engineering to more complex attempts such as corporate espionage.
• Run security awareness training for the team.
• Work closely with engineering and infrastructure to build security into how we develop and run our product.

Requirements

• 5+ years of hands-on experience in information security, security operations, security engineering, or system administration with a strong security focus.
• Leadership experience, such as leading a security initiative, project, or small team, while still doing the hands-on work yourself.
• Experience in incident response and incident analysis.
• Hands-on experience with security tooling such as SIEM, EDR, or MDM.
• Working knowledge of security frameworks such as ISO 27001, SOC 2, or NIST.
• Experience securing cloud infrastructure and distributed remote teams.
• Experience running security awareness training.
• High level of independence and ownership.
• Ability to both define security strategy and implement it yourself.
• Upper-Intermediate English (B2+) or higher.

Nice to Have

• Interest in multi-domain security, where cyber, information, and physical security are handled together.
• Background in intelligence, military, or law enforcement before moving into cybersecurity.
• Understanding of counterintelligence and influence operations.

We Offer

• Opportunity to contribute to a mission-driven startup and support prestigious clients, including governments worldwide, enterprise clients, and leading NGOs in tackling global security challenges.
• Autonomy and freedom to drive experiments and bring your own ideas to life.
• Flexibility of fully remote work.
• Flexible, unlimited time-off policy.