Information Security Manager: Lead Scaled Security Program

Openkrill; United States; Remote; USD 100,000 - 130,000; Full time

Job summary

Aries is seeking an Information Security Manager to own the day-to-day operation, governance, and ongoing development of our information security program.

This hands-on leadership role will manage our Information Security Analysts, work closely with our vCISO, Compliance, Engineering, IT, and executive leadership, and ensure that security policies, controls, incidents, risks, and regulatory obligations are actively managed and documented.

Qualifications

• Several years of progressive experience in information security, governance, security operations, or GRC.
• Experience owning or contributing to an organizational information security program.
• Experience leading security professionals and cross-functional security initiatives.
• Strong understanding of governance, risk management, incident response, and control frameworks.
• Experience with security compliance platforms such as Vanta, Drata, Secureframe, or similar tools.
• Experience supporting audits, assessments, compliance programs, or regulatory examinations.

Responsibilities

• Own and continuously improve Aries’ information security governance framework.
• Take day-to-day ownership of the information security program and mentor Analysts.
• Coordinate security initiatives across Engineering, IT, Compliance and other teams.
• Oversee incident response, investigations, containment, remediation, and post-incident activities.
• Produce security reports, metrics, risk updates, and control-status reporting for Compliance and leadership.
• Coordinate evidence gathering and control testing activities and support examinations and audits.

Skills

Information security governance

Security operations

GRC

Incident response

Regulatory compliance

Executive communications

Leadership

Tools

Vanta

Drata

Secureframe

Job description

Aries is seeking an Information Security Manager to own the day-to-day operation, governance, and ongoing development of our information security program.

This hands-on leadership role will manage our Information Security Analysts, work closely with our vCISO, Compliance, Engineering, IT, and executive leadership, and ensure that security policies, controls, incidents, risks, and regulatory obligations are actively managed and documented.