Information Security Manager | Corporate Technology

Red Ventures; Charlotte (NC); On-site; CAD 207,000 - 318,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Disability Insurance

Flexible Spending Accounts

Holiday Pay

401(k) with match

Employee Assistance Program

Parental Benefits

Generous PTO

Job summary

Red Ventures is seeking an Information Security Manager to lead risk reduction and own the security program across multiple lines of business. This player‑coach role partners with engineering to remediate, review architecture, and enforce cloud security standards in AWS at scale.

You will drive vulnerability management, compliance programs (PCI, SOC 2, ISO 27001, NYDFS), and bridge communications with Legal, Finance, and BU leaders to translate risk into action.

Qualifications

• 7+ years of security engineering, cybersecurity, or tech risk with ownership of a vulnerability management or technical risk‑reduction program.
• Hands‑on AWS security experience at scale.
• Experience leading technical teams, including architecture reviews with engineering teams.
• Working knowledge of risk and control frameworks (NIST, ISO 27001).
• Working familiarity with incident response and detection engineering.
• Strong stakeholder influence skills, with the ability to lead without authority.

Responsibilities

• Lead vulnerability management and risk reduction across cloud and code environments, partnering with engineering teams to prioritize and close high-impact findings.
• Own architecture review for new systems and major changes: read cloud configurations and IAM policies, guide engineers through remediation.
• Set and enforce security architecture practices across AWS environment, evaluating design decisions and identifying gaps.
• Translate technical risk into terms BU leaders, Engineering, Finance, and Legal will act on, building trusted relationships across the portfolio.
• Maintain familiarity with incident response and detection engineering practices, partnering with engineers who own day-to-day detection and response.
• Leverage automation and AI tooling to reduce manual security and compliance workflows within the first year.
• Oversee compliance programs across PCI, SOC 2, ISO 27001, and NYDFS; own policy exception program and vendor/third-party risk management.

Skills

Vulnerability management

Security architecture

Cloud security (AWS)

Automation / AI tooling

Risk communication

People leadership

Incident response familiarity

Compliance programs (PCI, SOC 2, ISO 2

Tools

AWS

Job description

This role requires a hybrid schedule and will be based in our South Charlotte, NC Headquarters (Tuesday through Thursday) and work fully remotely on Mondays and Fridays each week.

Curious how Shared Services fits into Red Ventures? Click here.

Red Ventures is hiring an Information Security Manager to lead technical risk reduction across our organization; this is a player-coach role, you will own the program and stay close to the work. This leader will drive cybersecurity risk management across vulnerability management, architecture review, and cloud security standards across multiple lines of business, while also ensuring compliance obligations are met with rigor. This role includes direct people management responsibility, with a team that grows in scope over time.

What You’ll Do:

• Lead vulnerability management and risk reduction across cloud and code environments, partnering directly with engineering teams to prioritize and close the highest-impact findings.
• Own architecture review for new systems and major changes: read cloud configurations and IAM policies, identify risk before it ships, and guide engineers through remediation, not just flag issues and hand them off.
• Set and enforce security architecture practices across our AWS environment, evaluating design decisions and identifying where technical controls fall short of what they claim to do.
• Translate technical risk into terms BU leaders, Engineering, Finance, and Legal will act on, building trusted relationships across the portfolio rather than operating as a gate.
• Maintain working familiarity with incident response and detection engineering practices, partnering closely with the engineers who own day-to-day detection and response.
• Leverage automation and AI tooling to reduce manual security and compliance workflows, targeting meaningful burden reduction within the first year.
• Oversee compliance programs across PCI, SOC 2, ISO 27001, and NYDFS; own the policy exception program and oversee vendor/third-party risk management.

What We’re Looking For:

• Vulnerability management and risk reduction : a proven track record identifying, prioritizing, and driving remediation of technical risk across cloud and code environments, not just tracking it in a spreadsheet.
• Security architecture fluency : understands secure design principles, can read and evaluate cloud configurations and IAM policies, and can lead engineers through design reviews and risk mitigation work.
• Cloud fluency : hands‑on experience with AWS at scale (GCP a plus); has actually assessed risk in these environments, not just read about them.
• Automation‑first mindset : track record of eliminating manual security or GRC work through tooling, scripting, or AI‑assisted workflows.
• Multi‑stakeholder risk communication : translates technical risk into business impact for non‑technical leaders across diverse business units.
• People leader who develops talent : actively grows the team toward greater scope and ownership.
• Working familiarity with incident response and detection engineering : understands the incident lifecycle and detection practices well enough to partner credibly with the engineers who own them day to day; this role does not carry primary IR ownership.
• Compliance program exposure : working knowledge of PCI, SOC 2, ISO 27001, or NYDFS and how each maps to technical controls, gained through partnership with a compliance program, not necessarily as its sole owner.

Minimum Qualifications:

• 7+ years of experience in security engineering, cybersecurity, or technology risk, with demonstrated ownership of a vulnerability management or technical risk‑reduction program, not just contribution to one.
• Hands‑on cloud security experience in AWS at scale.
• Experience leading technical teams, including architecture or design reviews with engineering teams.
• Working knowledge of risk and control frameworks (NIST, ISO 27001).
• Working familiarity with incident response and detection engineering.
• Strong stakeholder influence skills, with the ability to lead without authority.

Preferred Qualifications:

• AWS Security Specialty certification, or equivalent hands‑on cloud security credential. CISSP, GCFA, GIAC, CISA, or CRISC a plus.
• Multi‑business‑unit or holding‑company experience, with familiarity operating in federated environments where risk priorities and technology stacks vary by business unit.
• Experience in regulated environments (SOC 2, PCI, NYDFS), gained through partnership with a compliance function rather than sole ownership.
• Scripting or light automation skills (Python, PowerShell, or similar) to prototype automation before handing off to engineering.

Compensation:

Total Cash Compensation Range: $150,000 - $230,000 per year

Actual compensation varies based on location, experience, and qualifications.

Who We Are:

Red Ventures is a global portfolio of high‑growth companies - spanning several U.S. businesses, a joint venture in the health services industry, and strategic investments in Europe. Their businesses include The Points Guy, Lonely Planet, Bankrate, the Allconnect Platform, RV Home Client Growth, RV Growth & Transformation, Sage Home Loans Corporation, and more. Across the portfolio, Red Ventures businesses deliver seamless digital experiences for consumers, help Fortune 100 clients solve large‑scale digital growth challenges, and create world‑class experiences and opportunities for employees. Learn more at redventures.com and follow @RedVentures on LinkedIn and Instagram.

At Red Ventures, we believe diverse, inclusive teams are better. To help you better understand our core values and beliefs, we encourage you to watch this brief YouTube video: Our Belief Statements. This will give you insight into the principles that guide our work and our commitment to fostering an inclusive environment.

Red Ventures is an equal opportunity employer that does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or any other basis protected by law. Employment at Red Ventures is based solely on a person’s merit and qualifications.

We are committed to providing equal employment opportunities to qualified individuals with disabilities. This includes providing reasonable accommodation where appropriate. Should you require a reasonable accommodation to apply or participate in the job application or interview process, please contact [e-mail].

Questions about this Privacy Notice can be directed to [e-mail]. Alternatively, you may raise any questions or concerns to your manager, HR Business Partner, or through the Privacy Team.

• Health Insurance Coverage (medical, dental, and vision)
• Life Insurance
• Short and Long‑Term Disability Insurance
• Flexible Spending Accounts
• Holiday Pay
• 401(k) with match
• Employee Assistance Program
• Paid Parental Bonding Benefit Program
• Flexible Paid Time Off (PTO): We believe time to rest and recharge is essential. That’s why we offer a generous and flexible PTO policy. Full-time employees accrue 20 days of PTO for a full calendar year annually, with an increase to 25 days after five years of service.