Senior Information Security Architect & Leader

People AI; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Backstory is seeking a Senior Information Security Manager to build, scale, and own preventative security across cloud, SaaS, endpoint, identity, network, and data environments. You will translate broad objectives into concrete technical requirements, lead tooling deployments, and drive remediation with IT, Eng, DevOps, and Product teams.

You will mentor security engineers, report to the CISO, and partner on audits and regulatory controls across SOC 2, ISO 27001, and GDPR-aligned standards.

Qualifications

• 7+ years in information security with hands-on enterprise controls.
• 2+ years technical leadership or people management.
• Deep knowledge of cloud, SaaS, endpoint, identity, network, and data security.
• Hands-on tooling and controls experience, not only policy.
• Experience with DLP, IAM, endpoint security, vulnerability management, insider threat, access management, and monitoring.
• Understanding of cloud infrastructure, risk management, and modern security architecture.
• Experience in Mac/Linux/cloud/open-source environments.
• Scripting (Python) and infrastructure as code security (Terraform, policy as code, CI/CD guardrails).
• Knowledge of NIST, CIS, ISO 27001, SOC 2, and Zero Trust.
• Audits: work with auditors, gather evidence, remediate findings.
• Securing third-party API and OAuth integrations.
• Translate threats into actionable solutions with Eng, Product, IT, and stakeholders.
• Analytical problem-solving and autonomous work style.
• Experience in U.S.-based tech environments and fast-moving settings.

Responsibilities

• Own and mature preventative security across cloud, SaaS, endpoint, identity, network, and data environments.
• Translate objectives into technical requirements, controls, tooling, and plans.
• Evaluate, deploy security platforms across DLP, insider threat, IAM, vulnerability management, and monitoring.
• Continuously assess security posture, identify gaps, and drive remediation.
• Partner with IT, Eng, DevOps, and Product to integrate security into new tech and initiatives.
• Build metrics and reporting for visibility into security controls and posture.
• Collaborate with Security Operations to ensure preventive controls provide protection.
• Develop and test incident response playbooks, BC/DR plans.
• Work with CISO/CIO/CTO on compliance initiatives and audit evidence.
• Translate regulatory requirements into practical technical controls.
• Provide direction and mentorship to security engineers and external contractors.
• Serve as trusted security advisor to stakeholders, translating threats into actions.
• Tackle ambiguous security challenges from strategy to implementation and optimization.

Skills

Security leadership

Cloud security

SaaS security

Endpoint security

Identity security

Network security

Data security

Risk management

Audits & compliance

Mentorship

Strategic planning

Analytical thinking

Security strategy

Stakeholder communication

Tools

Python

Terraform

Policy as code

CI/CD guardrails

DLP platforms

OAuth integrations

Job description

Backstory is seeking a Senior Information Security Manager to build, scale, and own preventative security across cloud, SaaS, endpoint, identity, network, and data environments. You will translate broad objectives into concrete technical requirements, lead tooling deployments, and drive remediation with IT, Eng, DevOps, and Product teams.

You will mentor security engineers, report to the CISO, and partner on audits and regulatory controls across SOC 2, ISO 27001, and GDPR-aligned standards.