Senior Information Security Lead

Addison Group; Los Angeles (CA); Hybrid; USD 125,000 - 165,000; Full time

Benefits offered by this job

Health insurance

Disability insurance

Life insurance

401(k) retirement plans

PTO including vacation and sick days

Job summary

Addison Group is seeking a Senior Information Security Lead in Woodland Hills, CA to own enterprise security controls, governance, and audit readiness in a hybrid tech environment.

The role blends hands-on security with governance and reporting, focusing on designing, implementing, monitoring, and improving security controls across cloud and on-prem platforms while assisting audits and remediation activities.

Qualifications

• 5+ years of progressive experience in information security or related fields.
• Experience administering Palo Alto Networks Firewalls.
• Experience with Netskope SSE / Zero Trust solutions.
• Cloud security knowledge in Microsoft Azure and AWS.
• Experience with vulnerability management programs and security risk assessments.
• Hands-on experience supporting security audits, compliance reviews, and control testing.
• Understanding of IT General Controls (ITGCs) and security governance practices.
• Strong knowledge of security frameworks, best practices, and risk management principles.
• Excellent documentation, analytical, and problem-solving skills.
• Strong communication skills with the ability to interact effectively with technical teams, auditors, and executive leadership.

Responsibilities

• Design, implement, and maintain enterprise security controls across hybrid environments.
• Serve as the primary security control owner for network, cloud, and information security initiatives.
• Manage and optimize security technologies including firewalls, secure access platforms, vulnerability management tools, and cloud security controls.
• Lead vulnerability management efforts, including identification, prioritization, remediation tracking, and reporting.
• Conduct and coordinate phishing simulations, security awareness initiatives, and risk reduction activities.
• Partner with internal and external auditors to support audit requests, evidence collection, and compliance reviews.
• Maintain security documentation, policies, standards, procedures, and control evidence.
• Support SOX compliance efforts and IT General Controls (ITGC) audit readiness.
• Manage security findings, control deficiencies, remediation plans, and risk exceptions.
• Collaborate with infrastructure, cloud, networking, and application teams to strengthen security posture.
• Provide security-related guidance and recommendations to technical teams and business stakeholders.
• Communicate risks, remediation status, and security initiatives to leadership and executive stakeholders.

Skills

Security leadership

Communication

Documentation

Auditing

Tools

Palo Alto Firewalls

Netskope SSE

Azure

AWS

Vulnerability management tools

Job description

Title: Senior Information Security Lead

Location: Woodland Hills, CA

Salary: $125 - 165k

This position is not eligible for sponsorship

Benefits

• health insurance
• disability insurance
• life insurance
• retirement plans (like a 401(k))
• paid time off (PTO) including vacation and sick days

Summary

Our client is seeking a Senior Information Security Lead to serve as the primary owner of enterprise security controls, security governance, and audit readiness initiatives across a hybrid technology environment. This is a hands‑on individual contributor role responsible for designing, implementing, monitoring, and continuously improving network and information security controls across cloud and on‑premises platforms. The ideal candidate will combine strong technical cybersecurity expertise with the ability to support compliance, risk management, internal audits, and executive‑level reporting. This position plays a critical role in maintaining security posture, driving remediation efforts, managing security exceptions, and ensuring ongoing readiness for regulatory and audit requirements. This role is approximately 70% technical and 30% governance, compliance, and stakeholder engagement.

Key Responsibilities

• Design, implement, and maintain enterprise security controls across hybrid environments.
• Serve as the primary security control owner for network, cloud, and information security initiatives.
• Manage and optimize security technologies including firewalls, secure access platforms, vulnerability management tools, and cloud security controls.
• Lead vulnerability management efforts, including identification, prioritization, remediation tracking, and reporting.
• Conduct and coordinate phishing simulations, security awareness initiatives, and risk reduction activities.
• Partner with internal and external auditors to support audit requests, evidence collection, and compliance reviews.
• Maintain security documentation, policies, standards, procedures, and control evidence.
• Support SOX compliance efforts and IT General Controls (ITGC) audit readiness.
• Manage security findings, control deficiencies, remediation plans, and risk exceptions.
• Collaborate with infrastructure, cloud, networking, and application teams to strengthen security posture.
• Provide security‑related guidance and recommendations to technical teams and business stakeholders.
• Communicate risks, remediation status, and security initiatives to leadership and executive stakeholders.

Required Qualifications

• 5+ years of progressive experience in information security, cybersecurity, network security, or infrastructure security.
• Experience administering and supporting Palo Alto Networks Firewalls.
• Experience working with Netskope Secure Service Edge (SSE) / Zero Trust solutions.
• Working knowledge of cloud security concepts within Microsoft Azure and Amazon Web Services (AWS).
• Experience with vulnerability management programs and security risk assessments.
• Hands‑on experience supporting security audits, compliance reviews, and control testing.
• Understanding of IT General Controls (ITGCs) and security governance practices.
• Strong knowledge of security frameworks, best practices, and risk management principles.
• Excellent documentation, analytical, and problem‑solving skills.
• Strong communication skills with the ability to interact effectively with technical teams, auditors, and executive leadership.

Preferred Qualifications

• Experience supporting SOX compliance and audit readiness programs.
• Industry certifications such as CISSP, CISM, CCSP, Security+, Palo Alto, Azure Security, or AWS Security certifications.
• Experience with hybrid infrastructure environments spanning cloud and on‑premises systems.
• Familiarity with security operations, threat management, and incident response practices.
• Knowledge of identity and access management (IAM) and Zero Trust security architecture.
• Experience managing security‑related risk exceptions and remediation programs.

Ideal Candidate Profile

The ideal candidate is a senior cybersecurity professional who enjoys remaining highly technical while also serving as a trusted advisor for security governance, risk, and compliance activities. This individual is comfortable working independently, partnering with auditors and executives, driving remediation efforts, and maintaining a secure, audit‑ready environment without direct people management responsibilities.