Remote Information Security Manager — Roadmap & Incident Response

Catalyst Acoustics Group; Columbus (OH); Hybrid; USD 150,000 - 170,000; Full time

Job summary

Catalyst Acoustics Group seeks an Information Security Manager to own and run the security program. This hands-on leader acts as a player-coach, setting governance, responding to incidents, and guiding tooling with support from a co-managed SOC for scale.

The role reports to the VP, Technology and collaborates across IT, HR, Operations, and brands. It covers US sites with remote work options and an eventual security-program expansion across sites.

Qualifications

• 5+ years in information security with a mix of hands-on operations and program/leadership responsibility.
• Direct experience with incident response and EDR tooling.
• Microsoft 365 / Entra (Azure AD) security depth.
• Email security administration.
• Vulnerability management and remediation experience.
• Experience owning or heavily contributing to a security awareness program.
• Ability to set policy/governance and to report security posture to executive leadership.
• Strong written and verbal communication; authorized to work in the United States.
• Bachelor’s degree in cybersecurity, information systems, CS, or related field.

Responsibilities

• Own and drive CAG's information-security roadmap and priorities across all brands and sites.
• Develop and maintain security policy, standards, and governance; drive toward a defined baseline.
• Own risk and compliance: risk register, control gaps, vulnerability-management program cadence, annual penetration-test coordination, and remediation tracking.
• Own the security awareness program (KnowBe4): training assignment/completion, phishing-simulation campaigns, remediation with HR, and metrics.
• Manage security vendors and tooling — including the Paragus co-managed SOC relationship, EDR, and email security.
• Report to leadership: regular security posture, KPIs, incident summaries, and risk readouts for VP, Technology and ELT.
• Lead security due diligence and integration for acquisitions; fold acquired environments into baseline.
• Own cyber-insurance renewal attestations and respond to security questionnaires and audits.
• Own or co-own business continuity and disaster-recovery planning and testing.
• Contribute security perspective to ERP consolidation and major tech projects.

Skills

InfoSec leadership

Incident response

EDR tooling

M365 / Entra security

Email security

Vulnerability management

Security awareness program

Policy governance

Communication skills

US work authorization

Bachelor's degree in cybersecurity

Education

Bachelor's degree in cybersecurity

Job description

Catalyst Acoustics Group seeks an Information Security Manager to own and run the security program. This hands-on leader acts as a player-coach, setting governance, responding to incidents, and guiding tooling with support from a co-managed SOC for scale.

The role reports to the VP, Technology and collaborates across IT, HR, Operations, and brands. It covers US sites with remote work options and an eventual security-program expansion across sites.