Remote Information Security Leader - GRC & Automation

Wisconsin Foundation and Alumni Association; Madison (WI); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

10% 401k contribution after one year

Job summary

The Wisconsin Foundation and Alumni Association (WFAA) is seeking an Information Security Manager to lead and enhance the security program within the Information Technology department. The role emphasizes governance, risk, compliance, incident response, and automation to foster a security-first culture.

Remote work is possible with periodic travel to Madison; candidates must reside in allowed states. The role reports to the Sr.

Qualifications

• Bachelor’s degree or equivalent experience in IT or CS.
• 7+ years of progressive cybersecurity experience.
• 3+ years in a people-management role.
• 5+ years with enterprise security tools and technologies.

Responsibilities

• Lead governance, risk & compliance programs, including HIPAA, PCI-DSS, and NIST.
• Oversee vulnerability management, risk assessments, and audits.
• Develop and maintain security policies, standards, and procedures.
• Lead penetration testing efforts and remediation coordination.
• Manage third-party security risk and vendor security requirements.
• Oversee security awareness training program and metrics.
• Define strategic security roadmaps with cross-functional teams.
• Drive automation and AI-enabled tooling to improve security operations.

Skills

Cybersecurity leadership

Security architecture

Incident response

Vulnerability management

Automation & AI in security

Stakeholder management

Team leadership

Education

Bachelor’s degree in Information Technology, Computer Science, or relevant experience

Tools

SIEM

EDR

IDS/IPS

Firewalls

Endpoint protection

Job description

The Wisconsin Foundation and Alumni Association (WFAA) is seeking an Information Security Manager to lead and enhance the security program within the Information Technology department. The role emphasizes governance, risk, compliance, incident response, and automation to foster a security-first culture.

Remote work is possible with periodic travel to Madison; candidates must reside in allowed states. The role reports to the Sr.