Senior Information Security Leader — ISMS, Compliance & Risk

Zoomcar; Sunnyvale (CA); On-site; USD 167,000 - 204,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k)

Paid holidays

Vacation time

Sick time

Leave program

Equity program

Bonus eligibility

Job summary

Fortinet in Sunnyvale, CA seeks a Senior Information Security Manager to lead the ISMS development and security program. You will coordinate security compliance initiatives across the organization and serve as the primary liaison with external auditors and regulators.

The role requires deep expertise in ISO/IEC 27001, NIST security frameworks, cloud security, risk governance, and security operations. This position is onsite at Fortinet’s US headquarters with competitive rewards.

Qualifications

• Bachelor’s degree or higher in computer science, information security or related field.
• CISSP / CISA / CISM certifications preferred or equivalent.
• ISO 27001 Lead‑Auditor or similar certification is desirable.

Responsibilities

• Lead the information security team and drive ISMS design, implementation, and continuous improvement.
• Perform gap analyses against NIST SP800-53 and other frameworks; create mitigation plans.
• Apply information security and privacy requirements to ISMS policies and documents.
• Prepare materials for FedRAMP and GovRAMP compliance efforts and audits.
• Develop KPIs and reporting to ensure ongoing compliance and improvement.
• Oversee audits, vendor reviews, and response to audit requests.
• Lead risk and privacy impact assessments; drive risk treatment and remediation plans.
• Collaborate with operations to ensure controls are in place and functioning.
• Lead daily security operations, incident handling, and response coordination.
• Drive vulnerability management and patching with operations teams.

Skills

InfoSec leadership

NIST SP800-53

ISO 27001

SOC2 knowledge

FedRAMP/GovRAMP

Cloud security

Network security

Linux/Windows

VMware

MySQL/MSSQL

Fortinet products

Communication skills

Independent work

Detail oriented

Policy documentation

Education

Bachelor's degree in Computer Science or Information Security

CISSP or CISA or CISM

ISO 27001 Lead-Auditor

VCP

CCSP

CRISC

Tools

Fortinet products

SIEM

Audit tools

Job description

Fortinet in Sunnyvale, CA seeks a Senior Information Security Manager to lead the ISMS development and security program. You will coordinate security compliance initiatives across the organization and serve as the primary liaison with external auditors and regulators.

The role requires deep expertise in ISO/IEC 27001, NIST security frameworks, cloud security, risk governance, and security operations. This position is onsite at Fortinet’s US headquarters with competitive rewards.