Senior Information Security Manager

People AI; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Backstory is seeking a Senior Information Security Manager to build, scale, and own preventative security across cloud, SaaS, endpoint, identity, network, and data environments. You will translate broad objectives into concrete technical requirements, lead tooling deployments, and drive remediation with IT, Eng, DevOps, and Product teams.

You will mentor security engineers, report to the CISO, and partner on audits and regulatory controls across SOC 2, ISO 27001, and GDPR-aligned standards.

Qualifications

• 7+ years in information security with hands-on enterprise controls.
• 2+ years technical leadership or people management.
• Deep knowledge of cloud, SaaS, endpoint, identity, network, and data security.
• Hands-on tooling and controls experience, not only policy.
• Experience with DLP, IAM, endpoint security, vulnerability management, insider threat, access management, and monitoring.
• Understanding of cloud infrastructure, risk management, and modern security architecture.
• Experience in Mac/Linux/cloud/open-source environments.
• Scripting (Python) and infrastructure as code security (Terraform, policy as code, CI/CD guardrails).
• Knowledge of NIST, CIS, ISO 27001, SOC 2, and Zero Trust.
• Audits: work with auditors, gather evidence, remediate findings.
• Securing third-party API and OAuth integrations.
• Translate threats into actionable solutions with Eng, Product, IT, and stakeholders.
• Analytical problem-solving and autonomous work style.
• Experience in U.S.-based tech environments and fast-moving settings.

Responsibilities

• Own and mature preventative security across cloud, SaaS, endpoint, identity, network, and data environments.
• Translate objectives into technical requirements, controls, tooling, and plans.
• Evaluate, deploy security platforms across DLP, insider threat, IAM, vulnerability management, and monitoring.
• Continuously assess security posture, identify gaps, and drive remediation.
• Partner with IT, Eng, DevOps, and Product to integrate security into new tech and initiatives.
• Build metrics and reporting for visibility into security controls and posture.
• Collaborate with Security Operations to ensure preventive controls provide protection.
• Develop and test incident response playbooks, BC/DR plans.
• Work with CISO/CIO/CTO on compliance initiatives and audit evidence.
• Translate regulatory requirements into practical technical controls.
• Provide direction and mentorship to security engineers and external contractors.
• Serve as trusted security advisor to stakeholders, translating threats into actions.
• Tackle ambiguous security challenges from strategy to implementation and optimization.

Skills

Security leadership

Cloud security

SaaS security

Endpoint security

Identity security

Network security

Data security

Risk management

Audits & compliance

Mentorship

Strategic planning

Analytical thinking

Security strategy

Stakeholder communication

Tools

Python

Terraform

Policy as code

CI/CD guardrails

DLP platforms

OAuth integrations

Job description

Backstory (formerly People.ai) is the leading AI answers platform for sales teams. With more than a decade of training AI models on billions of sales interactions, Backstory enables modern sales teams to ask questions and get the right answer in the moment directly within their existing AI workflows. Sales leaders from companies like Red Hat, Five9, Palo Alto Networks, Iron Mountain, TransUnion, Randstad and others rely on Backstory to get trusted answers wrapped in real business context helping them orchestrate deals more effectively and drive revenue.

By connecting every signal to the right accounts and opportunities, Backstory shows teams exactly what is happening and what to do next. Customers across industries including enterprise, cybersecurity, data and analytics, and defense use Backstory to drive trillions in pipeline and revenue.

Recognized by Gartner and Forrester, the Inc. 5000, Y Combinator Top Companies, and the Forbes AI 50, Backstory is based in San Francisco and backed by ICONIQ Capital, Andreessen Horowitz, Lightspeed Venture Partners, Akkadian Ventures and Mubadala Capital.

The Role

Backstory is looking for a Senior Information Security Manager to help build, scale, and own the preventative security capabilities that protect our people, systems, data, and customers.

This is a hands-on leadership role for someone who can take a broad security objective and independently turn it into a thoughtful technical strategy and implementation plan. You’ll report to the CISO and work closely with Head of IT and partner across Engineering, Platforms, Product, and business teams to continuously strengthen our security posture as we scale.

• Own and mature preventative security capabilities across cloud, SaaS, endpoint, identity, network, and data environments.
• Translate broad security objectives into concrete technical requirements, controls, tooling, and implementation plans.
• Evaluate, select, configure, and deploy security platforms and tooling across areas such as DLP, insider threat, endpoint security, IAM, vulnerability management, access controls, and security monitoring.
• Continuously assess Backstory’s security posture, identify gaps and vulnerabilities, prioritize risk, and drive remediation through completion.
• Partner closely with IT, Engineering, DevOps, and Product to integrate security controls into new technologies, infrastructure, and business initiatives.
• Build metrics and reporting that provide clear visibility into the effectiveness of our security controls and overall security posture.
• Partner with Security Operations to ensure preventative controls provide the visibility and protection needed to investigate and respond to potential threats.
• Develop, maintain, and test incident response playbooks, business continuity processes, and disaster recovery plans.
• Partner with CISO, CIO and CTO on security compliance initiatives and work directly with auditors to provide evidence, explain controls, and remediate findings.
• Translate requirements from frameworks and regulations including SOC 2, ISO 27001, ISO 42001, GDPR, CCPA/CPRA and EU AI Act into practical technical controls.
• Provide technical direction and mentorship to security engineers, analysts, IT partners, and external contractors.
• Serve as a trusted security advisor across the organization, translating complex threats and vulnerabilities into actionable recommendations for both technical and non-technical stakeholders.
• Take ownership of ambiguous security challenges from strategy and evaluation through implementation, measurement, and continuous improvement.

• 7+ years of progressive experience in information security, with meaningful hands-on experience implementing enterprise security controls.
• 2+ years of technical leadership, team lead, or people management experience.
• Deep understanding of cloud, SaaS, endpoint, identity, network, and data security, including traditional and Agentic AI environments and workloads.
• Strong hands-on experience implementing security tooling and controls rather than solely defining policy or overseeing implementation.
• Experience across areas such as DLP, IAM, endpoint security, vulnerability management, insider threat, access management, and security monitoring.
• Strong understanding of modern cloud infrastructure, security architecture, and risk management.
• Experience operating in a modern Mac, Linux, cloud, SaaS, and open-source-heavy environment.
• Experience automating security controls and workflows through scripting (e.g., Python) and infrastructure as code security (e.g., Terraform, policy as code, CI/CD pipeline guardrails).
• Working knowledge of security frameworks including NIST, CIS, ISO 27001, SOC 2, and Zero Trust.
• Experience participating in security audits, working directly with auditors, gathering technical evidence, and remediating findings.
• Deep knowledge on securing third-party API and OAuth integrations; scoping, token lifecycle management, and revocation across SaaS and data platforms.
• Ability to translate complex technical threats and vulnerabilities into actionable solutions with Engineering, Product, IT, and non-technical stakeholders.
• Strong analytical and problem-solving skills with the ability to independently evaluate security challenges and determine the right technical approach.
• Experience working within U.S.-based technology environments and familiarity with enterprise security expectations.
• Comfortable operating autonomously in a fast-moving environment where priorities and requirements will continue to evolve.

Headquartered in San Francisco, CA, Backstoryis backed by Y Combinator and Silicon Valley’s top investors, including ICONIQ Capital, Andreessen Horowitz, Lightspeed Venture Partners, Akkadian Ventures, and Mubadala Capital. Backstoryis listed in the top 20 percent of Inc 5000 companies, is a regular leader in our key categories on G2, and is on the Forbes list of America’s Best Startup Employers. For more information, please visit www.Backstory.ai.

Regular employees may be eligible for commissions or bonus programs (target included in OTE), equity, and benefits. The range is subject to change. Backstorytakes into wide range of factors when determining an individual’s pay. These factors can include, skill set, training and experience, licensure and certifications, and location and metropolitan area.