Information Technology Security Manager

PEAC Solutions; Mount Laurel Township (NJ); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Hybrid work schedule

Medical, dental, vision insurance

401(k) with match

Paid time off

Birthday off

Job summary

PEAC Solutions is seeking an Information Technology Security Manager in Mt. Laurel, NJ. The role leads our cybersecurity program, aligning security strategy with business goals while managing governance, risk, and compliance across on-premises and cloud environments.

The position requires eight years of cybersecurity experience, CISSP/CISM/CCSP or equivalent preferred, and a hybrid work arrangement with three days in the Mt. Laurel office and two days remote.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred; equivalent professional experience considered.
• At least eight years of progressively responsible experience in cybersecurity, information security, or infrastructure security.
• Hands-on experience in cloud security, security operations, vulnerability management, incident response, and regulatory compliance or audit support.

Responsibilities

• Develop and maintain the cybersecurity strategy, roadmap, policies, standards, and operating procedures.
• Oversee protection across network, endpoint, cloud, identity, email, application, and data environments; monitor threats and implement controls.
• Lead triage, containment, remediation, recovery, root-cause analysis, and corrective actions after incidents.
• Direct risk assessments, vulnerability reviews, penetration testing, control evaluations, and remediation tracking.
• Coordinate security audits, compliance initiatives, and evidence collection to meet requirements.
• Guide security design for systems and projects; govern authentication and access reviews.
• Deliver security training and awareness programs to strengthen security culture.
• Manage security vendors, auditors, and service providers; ensure risk controls are effective.

Skills

Cybersecurity strategy

Leadership & communication

Risk assessment

Incident response

Policy development

Education

Bachelor’s degree in IT/CS/Cybersecurity

Equivalent professional experience

Tools

Microsoft Defender ATP

Fortinet

Cisco security platforms

SIEM

EDR/XDR

Microsoft 365/Azure security

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Technology Security Manager

Full Time Mt. Laurel, NJ, US

Salary Range: $140,000.00 To $160,000.00 Annually

Information Technology Security Manager

We are PEAC Solutions—large enough to finance the globe, yet small enough to stand shoulder-to-shoulder with our customers. We believe in the power of partnership and the promise of possibility. Our purpose is to fuel growth by providing smart, flexible lending solutions that help businesses overcome obstacles and seize new opportunities. Backed by HPS Investment Partners, a leading global investment firm, we offer equipment financing, working capital, and inventory lending solutions that keep businesses moving forward. As the world’s largest independent equipment finance company, we are expanding our global footprint—and we are doing it with purpose, grit, and a commitment to those we serve.

You are someone who thrives in an environment where ambition meets action. You bring curiosity, resilience, and a strong sense of accountability. You see challenges as opportunities and believe in making an impact for customers, for your team, and for the business. If you are looking to be a part of a company that values partnership over hierarchy and purpose over routine, your next chapter could start here.

The Information Technology Security Manager leads PEAC Solutions’ cybersecurity program, combining strategic oversight with hands‑on technical expertise to configure and maintain security controls. This role develops security strategy, governance, policies, standards, and procedures; oversees security operations, risk management, incident response, compliance, and awareness initiatives; and partners with business leaders, auditors, and third‑party providers to align security priorities with business objectives.

Core Responsibilities

• Strategy and Governance: Develop and maintain the cybersecurity strategy, roadmap, policies, standards, and operating procedures.
• Security Operations and Threat Management: Oversee protection across network, endpoint, cloud, identity, email, application, and data environments; monitor emerging threats and implement preventive and detective controls.
• Incident Response: Lead triage, containment, remediation, recovery, root‑cause analysis, and corrective actions following cybersecurity incidents.
• Risk and Vulnerability Management: Direct risk assessments, vulnerability reviews, penetration testing, control evaluations, and remediation tracking across internal systems, cloud services, and third parties.
• Compliance and Audit: Coordinate security audits, compliance initiatives, and evidence collection to meet regulatory, contractual, and internal requirements.
• Security Architecture and Access: Guide security design for systems, projects, integrations, and technology changes; govern authentication, privileged access, role‑based permissions, and access reviews.
• Security Awareness: Deliver training and awareness programs that strengthen accountability and the organization’s security culture.
• Third-Party Oversight: Manage security vendors, auditors, and service providers to ensure effective performance and appropriate risk management.
• Metrics and Executive Reporting: Develop cybersecurity and departmental KPIs covering risk exposure, control effectiveness, operational performance, incident trends, remediation, and program maturity. Present results to executive leadership with recommendations on priorities, improvements, and resource needs.

Required Skills

• Advanced knowledge of NIST, CIS Controls, ISO 27001, and zero‑trust principles.
• Hands‑on experience securing Microsoft 365, Azure, hybrid infrastructure, and enterprise networks.
• Working knowledge of Microsoft Defender ATP, Fortinet security technologies, and Cisco networking and security platforms.
• Technical proficiency with firewalls, EDR/XDR, SIEM, multifactor authentication, email security, vulnerability management, encryption, and data loss prevention tools.
• Expertise in identity and access management, privileged access controls, Active Directory, and Microsoft Entra ID.
• Experience in incident response, forensic coordination, threat remediation, business recovery, and post‑incident improvement.
• Ability to assess security risks, support audits, evaluate compliance, and develop policies and standards.
• Strong leadership and communication skills, including the ability to translate technical risks into business impacts and practical recommendations.
• Effective planning and prioritization skills to manage multiple initiatives, vendors, and competing demands.

Preferred Skills

• Experience with Cloudflare security, performance, and application protection services.
• Familiarity with Cisco Umbrella or Cisco Secure Access, including secure web gateway, DNS‑layer security, and secure access service edge capabilities.
• Knowledge of Microsoft Exchange and Exchange Online security, including threat protection, filtering, authentication, and mail‑flow controls.

Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred; equivalent professional experience considered.
• At least eight years of progressively responsible experience in cybersecurity, information security, or infrastructure security.
• Hands‑on experience in cloud security, security operations, vulnerability management, incident response, and regulatory compliance or audit support.
• Relevant certifications, such as CISSP, CISM, CCSP, Microsoft Certified: Azure Security Engineer Associate, or equivalent, strongly preferred.
• Demonstrated ability to develop and strengthen cybersecurity programs that reduce risk and support long‑term business resilience.

Additional Information:

• This is a hybrid position, based in our Mt. Laurel, NJ office, three days a week, with two days remote.

PEAC Solutions is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, ethnicity, disability, religion, national origin, gender, gender identity, gender expression, marital status, sexual orientation, age, protected veteran status, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

The successful candidate will receive competitive compensation along with our benefit package which includes medical, dental, vision, life insurance, short and long‑term disability, 401(k) with match, flexible spending, and paid time off. PEAC provides one paid day off per year to support community involvement. Celebrate you by also having off your birthday on us!