Senior Information Security Leader - SaaS & Cloud

Arch Systems; United States; On-site; USD 179,000 - 190,000; Full time

Benefits offered by this job

401k plan with company match

Health, dental, vision benefits

Equity

Job summary

Plume is seeking a Senior Manager of Information Security to lead and mature our security program at a critical inflection point. We already hold ISO 27001 and SOC 2 Type 1 certifications and now aim to achieve SOC 2 Type 2 while accelerating engineering across cloud, networks, and applications.

You will build a high‑functioning security team, formalize policies, and partner with Engineering to embed secure SDLC practices without slowing product development.

Qualifications

• Bachelor's degree or equivalent in information security, CS, or related field.
• 3+ years leading a security program end-to-end in a SaaS environment.
• Experience with ISO 27001 and SOC 2 frameworks and audit readiness.
• Strong cloud security, network security, and app security expertise.

Responsibilities

• Own and mature the information security program aligning with ISO 27001 and SOC 2 requirements.
• Formalize policies, standards, and procedures to sustain certification readiness.
• Lead security engineering for infrastructure, networks, cloud, and applications end to end.
• Develop IAM, cloud security architecture, vulnerability management, logging, and incident response.

Skills

Security leadership

Cloud security AWS/GCP

Network security

Application security

Policy development

Cross-functional collaboration

Education

Bachelor's degree in Information Security, Computer Science, Computer Engineering or related field

Job description

Plume is seeking a Senior Manager of Information Security to lead and mature our security program at a critical inflection point. We already hold ISO 27001 and SOC 2 Type 1 certifications and now aim to achieve SOC 2 Type 2 while accelerating engineering across cloud, networks, and applications.

You will build a high‑functioning security team, formalize policies, and partner with Engineering to embed secure SDLC practices without slowing product development.