Security Manager: AI & Vendor Risk Lead (Remote)

Avant Communications LLC; Chicago (IL); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Commuter Benefits

401K Match

Unlimited PTO

Generous Parental Leave

Job summary

Avant Communications LLC is seeking a hands-on Security Manager to own the organization’s day-to-day security posture across people, endpoints, software, and vendors. The role sits at the intersection of governance, technical security operations, and emerging AI risk, requiring someone who can set standards and dive into details.

You’ll review SOC 2 reports, scope vulnerability scans, and evaluate whether new AI tools are safe to approve.

Qualifications

• 4+ years in information security or related field.
• Experience in security governance, risk and compliance activities.
• Familiarity with vulnerability management, SOC processes, and MSSP coordination.

Responsibilities

• Own day-to-day security posture across people, endpoints, software and vendors.
• Review SOC 2 reports, perform vulnerability scoping, and assess AI tool safety for adoption.
• Manage identity/access controls, MFA, offboarding, and privileged access reviews.
• Run security awareness training and phishing simulations.
• Maintain software/SaaS inventory including shadow IT and vendor risk assessments.
• Coordinate vulnerability scanning across infrastructure, endpoints and applications.
• Oversee or participate in penetration testing and remediation tracking.
• Support incident response and post-incident reviews.

Skills

Security leadership

GRC

NIST CSF

Vendor risk

Threat analysis

Incident response

Tools

Nessus

Qualys

Tenable

Job description

Avant Communications LLC is seeking a hands-on Security Manager to own the organization’s day-to-day security posture across people, endpoints, software, and vendors. The role sits at the intersection of governance, technical security operations, and emerging AI risk, requiring someone who can set standards and dive into details.

You’ll review SOC 2 reports, scope vulnerability scans, and evaluate whether new AI tools are safe to approve.