Security Program Lead: Governance & Incident Response

Aries.com; Detroit (MI); On-site; USD 100,000 - 130,000; Full time

Job summary

Aries is seeking an Information Security Manager to own the day-to-day operation, governance, and continued development of our information security program.

You will manage our Information Security Analysts, collaborate with our vCISO, Compliance, Engineering, IT, and executive leadership, and ensure that security policies, controls, incidents, risks, and regulatory obligations are actively managed and documented.

Qualifications

• Several years of progressive experience in information security, governance, and risk management.
• Experience owning or contributing to an organizational information security program.
• Ability to lead security professionals and cross-functional initiatives.
• Familiarity with security compliance platforms such as Vanta, Drata, Secureframe.
• Experience with audits, regulatory examinations, and SOC 2/NIST/ISO controls.

Responsibilities

• Own and continuously improve Aries’ information security governance framework.
• Maintain security policies, standards, procedures, control documentation, and review cycles.
• Establish ownership and accountability for security controls across the organization.
• Maintain security risk registers, exceptions, remediation plans, and governance processes.
• Track security findings through remediation and ensure issues are resolved.

Skills

Information Security Governance

Security Program Management

Incident Response

Compliance & Regulatory Support

Security Controls & Vanta

vCISO & Executive Coordination

Security frameworks like SOC 2, NIST,

Tools

Vanta

Drata

Secureframe

Job description

Aries is seeking an Information Security Manager to own the day-to-day operation, governance, and continued development of our information security program.

You will manage our Information Security Analysts, collaborate with our vCISO, Compliance, Engineering, IT, and executive leadership, and ensure that security policies, controls, incidents, risks, and regulatory obligations are actively managed and documented.