Information Security Manager

Stravito; United States; Remote; USD 100,000 - 130,000; Full time

Job summary

Join a leading company as an Information Security Manager, where you'll manage security and privacy compliance initiatives. You will design security architecture for SaaS and AI systems, while collaborating with various teams to ensure compliance and security. This remote-first role offers a competitive compensation package and the chance to work with cutting-edge technology.

Benefits

Competitive compensation package

Remote-first work environment

Collaborative team culture

Qualifications

• 3+ years of hands-on cybersecurity experience.
• Understanding of ISO 27001, SOC 2, and similar security frameworks.

Responsibilities

• Designing and implementing security architecture for SaaS platform.
• Developing and maintaining security policies aligned with compliance frameworks.
• Collaborating with legal team on privacy-related initiatives.

Skills

Communication

Collaboration

Information Security

Compliance Frameworks

Education

Bachelor's degree in Information Security

Bachelor's degree in Computer Science

Tools

AWS

Azure

GCP

Job description

We're looking for smart, kind and curious minds to join us on our mission. Maybe that’s you?

You know that corporate document or piece of research you know you have somewhere but you can't seem to find it? The struggle to gather, organize and visualize all corporate knowledge and insights is real.

We are Stravito and this is the problem we solve.

Due to the universal nature of this problem, our customers come from various industries all around the world. We help world-leading organizations, such as McDonald’s, Comcast, Nestlé, Burberry and Heineken, get closer to their customers and make better, insights-backed decisions by organizing their knowledge and making it easy to access through our intuitive platform.

When we say we’re diverse and international, we mean it—our 100+ strong team represent over 30 nationalities. We are guided by our operating principles: simplicity first, an “own it, do it” mentality, embracing different perspectives, and enjoying the journey together.

About the job

As an Information Security Manager, you will manage our security and privacy compliance initiatives, serving as the key point person for security frameworks, customer security assessments, and privacy-related matters. You will work closely with our legal team and customer-facing departments to bridge technical security, compliance requirements, and business objectives.

Your key responsibilities will include:

• Designing and implementing security architecture for our SaaS platform and AI systems

• Developing and maintaining security policies, procedures, and controls aligned with multiple compliance frameworks

• Responding to security questionnaires and facilitating customer security due diligence

• Designing and implementing comprehensive security awareness training programs

• Collaborating with our legal team on privacy-related initiatives and compliance requirements

About you

We believe that you have extensive experience in information security with a focus on compliance frameworks and are skilled at explaining complex security concepts to various audiences. You demonstrate a strong knowledge of ISO 27001, SOC 2, and similar security frameworks, as well as privacy regulations and their technical implementation. With strong communication skills, you effectively collaborate with a variety of stakeholders, from technical teams to senior management and customers.

To be successful in this role, you need:

• Bachelor's degree in Information Security, Computer Science, or related field

• 3+ years of hands-on cybersecurity experience implementing and managing security controls, with additional knowledge of compliance frameworks

• Hands-on experience implementing and managing security controls in cloud environments (AWS, Azure, GCP)

• Demonstrated experience with security architecture design for SaaS platforms and AI/ML systems

• Understanding of ISO 27001, SOC 2, and similar security frameworks

• Strong knowledge of privacy regulations and their technical implementation

• Excellent communication skills with ability to explain complex security concepts to various audiences

• Relevant security certifications (e.g., CISSP, CISM)

• Familiarity with secure coding practices and ability to provide guidance to development teams

We would be particularly impressed if you have:

• Experience with ISO 42001 or AI security frameworks

• Previous experience in customer-facing security roles

• Knowledge of cloud security architecture and controls

• Hands-on experience with DevSecOps implementation

This is a remote-first position, allowing you to work from anywhere within the regions we operate.

What’s in it for you?

You will join a remote-first and globally spread team, with company events a couple of times each year as the icing on the cake We offer a fun, collaborative environment where everyone truly cares and helps each other. We have zero micro-management and instead you are encouraged to cultivate your own processes while giving and receiving feedback for improvement. Add to that a competitive compensation package, the possibility of working with cutting-edge technology in our industry (such as GenAI) and to be part of simplifying the professional lives of many - what’s not to like?

We look forward to hearing from you!