Senior InfoSec Leader: ISO 27001 & Governance (Hybrid)

Extime PS LLC; El Segundo (CA); Hybrid; USD 170,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision

401K with company match

Unlimited PTO

Tuition Reimbursement

Bonus opportunities

Job summary

Extime PS LLC seeks a Senior Manager of Information Security to lead the ISMS, drive ISO 27001 readiness, and coordinate governance across IT, Legal, and Operations. The role focuses on safeguarding critical infrastructure and sensitive data for PS terminals, with a hybrid schedule in El Segundo, CA.

The ideal candidate has 7+ years of security leadership, ISO 27001 expertise, and a proven ability to align security with business goals while managing third‑party risk and audit readiness.

Qualifications

• Bachelor’s degree or higher in a related field.
• 7+ years of progressively responsible information security experience.
• Hands-on ISO 27001 certification and audits experience.
• Strong governance, risk, and compliance capabilities.
• Proven leadership, stakeholder management, and communication skills.

Responsibilities

• Own the Information Security Program and ISMS, including ISO 27001 roadmap and audits.
• Establish and maintain security policies, standards, and governance.
• Lead Cybersecurity Analyst team; oversee security operations and incident response.
• Oversee vulnerability assessments, pen tests, and proactive security programs.
• Lead backup, disaster recovery, and business continuity program readiness.
• Manage incident response, investigations, and post-incident reviews.
• Coordinate audit readiness, evidence management, remediation tracking, and action plans.
• Foster a security-focused culture and formal access governance across the org.
• Oversee Third‑Party Risk Management; vendor risk assessments and oversight.
• Collaborate with IT, Legal, HR, Finance, Ops on security requirements and vendor onboarding.
• Maintain risk register and provide executive-level security posture reporting.

Skills

Leadership

Strategic Planning

Security Governance

ISO 27001

Risk Management

Audit Readiness

Mentoring

Education

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or related field

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Senior Manager of Information Security

IT Full Time Management El Segundo, CA, US

30+ days ago Requisition ID: 1317

Salary Range: $170,000.00 To $190,000.00 Annually

Who We Are

PS is redefining the way the world travels. We build and operate private airport terminals that transform commercial air travel into a seamless luxury experience. Currently serving guests at Los Angeles International Airport (LAX), Hartsfield-Jackson Atlanta International Airport (ATL), and Paris Charles de Gaulle (CDG), with new terminals just opened at Dallas Fort Worth International Airport (DFW) and Miami International Airport (MIA), PS is pioneering a new global standard in hospitality.

Far from the crowds and chaos of the public airport, PS offers members the privacy, ease, and security of the private flight experience while flying commercial. With exclusive partnerships with TSA and U.S. Customs and Border Protection, guests move effortlessly through line-free departures and arrivals. Every moment is carefully orchestrated by our expert team - private TSA screening, dedicated customs and immigration services, and luxury chauffeur transfers across the airfield directly to or from your aircraft.

Inside our private terminals, guests enjoy serene suites, chef-prepared dining, spa services, and personalized attention, while our Control Room coordinates discreetly with government, airline, and security partners to ensure unmatched efficiency, safety, and peace of mind. At PS, waiting in lines, crowded terminals, and luggage hassles give way to quiet elegance, service with heart and inspired experiences.

We are building more than terminals - we are shaping a new way to travel. If you’re passionate about luxury hospitality and excited to be part of something extraordinary, join us as we expand to new markets and reimagine the future of travel with PS.

Role: Senior Manager of Information Security

The Senior Manager of Information Security will serve as PS's dedicated information security leader, providing strategic direction, enterprise accountability, and hands-on oversight for the protection of the critical infrastructure and sensitive data that power PS's premium airport terminal operations.

Reporting directly to the Director of IT, this role will own the Information Security Management System (ISMS) and lead execution of the ISO 27001 roadmap, while strengthening security governance, security operations, audit readiness, third-party risk management, and organizational security maturity.

The role will partner with senior leaders and cross-functional stakeholders to establish sustainable governance, improve executive visibility into organizational security posture, and build a scalable security program that supports business growth, new locations, and evolving regulatory, contractual, partner, and customer requirements. Success in this role will be measured by the establishment of a mature, evidence-driven ISMS and PS's successful progression toward ISO 27001 certification.

Reports to: Director of IT
Location: PS HQ (El Segundo, CA)
Schedule: Full-time, Hybrid

• Own PS's Information Security Program, Information Security Management System (ISMS), and ISO 27001 certification roadmap, including readiness assessments, remediation planning, certification activities, surveillance audits, and continuous improvement efforts.
• Establish and maintain information security policies, standards, procedures, and governance processes aligned with ISO 27001 requirements, contractual obligations, and business needs, partnering with Legal on regulatory and privacy considerations.
• Lead, develop, and mentor the Cybersecurity Analyst team, establishing clear accountability for security operations, continuous monitoring, logging, incident response, and risk remediation.
• Lead regular vulnerability assessments of all PS systems including penetration testing, bug bounty and passive scanning programs.
• Lead operational development, testing, maintenance, and audit readiness activities for backup, incident response, disaster recovery, and business continuity programs in partnership with IT, Operations, and executive leadership.
• Respond to and manage security incidents and investigations, including coordination of incident response.
• Conduct regular internal security audits and assessments, including disaster recovery and incident response tabletops.
• Lead audit readiness activities, including evidence management, remediation tracking, corrective action management, certification activities, customer assessments, and external audits.
• Establish organization-wide evidence retention standards and processes to ensure security controls, audits, reviews, incidents, vendor assessments, training, and access management activities are consistently documented and audit-ready.
• Promote a strong security culture across the organization through training, awareness, and policy development.
• Establish and operate a formal access governance program, including user provisioning controls, privileged access oversight, periodic access reviews, and evidence retention.
• Own the Third-Party Risk Management (TPRM) program, including vendor classification, security due diligence, remediation tracking, ongoing oversight, and executive reporting of material third-party risks.
• Partner with IT, Legal, HR, Finance, Operations, Airport Operations, and other business stakeholders to integrate security and vendor risk requirements into onboarding, contracting, implementations, ongoing vendor management, and business initiatives.
• Maintain the Information Security Risk Register and provide executive reporting, governance forums, and leadership visibility into security posture, risk treatment, program maturity, and investment priorities.
• Serve as PS's security leader in cross-functional and executive discussions, advising on business initiatives, technology investments, new locations, cloud services, payment systems, customer platforms, and regulatory or contractual requirements.
• Build a scalable security operating model that reduces key-person dependency, clarifies ownership, and enables the security program to support company growth without increasing risk exposure.
• Manage the security program roadmap, operating priorities, resource needs, and security investments in coordination with IT leadership and business stakeholders.

Requirements / Qualification

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or a related field.
• Minimum 7 years of progressively responsible information security experience, including leadership responsibility for security programs, audit readiness, governance, security operations, or certification initiatives. Previous experience building and maturing security programs is strongly preferred.
• Hands-on experience with ISO 27001 certification processes and audits, including working with certification bodies.
• Strong understanding of information security governance, audit management, risk treatment methodologies, security operations, ISO 27001 controls, and security compliance frameworks.
• Proven experience partnering across IT, Legal, HR, Finance, Operations, and other business functions to implement security and risk management requirements.
• Demonstrated leadership experience managing teams, establishing accountability, influencing cross-functional stakeholders, and driving complex information security programs at enterprise scale.
• Exceptional client service and communication skills and a demonstrated ability to develop and maintain strong external and internal stakeholder relationships.
• Demonstrated experience building repeatable, evidence-driven security programs capable of supporting external certification and audit requirements.
• Proven experience leading internal and external audits, supporting enterprise risk programs, managing certification initiatives, and navigating regulatory and contractual requirements.
• Strong executive communication and presence, with the ability to translate technical and security risks into clear business decisions for senior leaders, auditors, customers, regulators, and external partners.
• Industry recognized certification like CISA, CIPP, CISSP, or CRISC, is advantageous.
• Pass a pre-employment drug screening + background check in accordance with company policy.

Full-Time Employee Benefits

• Employee benefits include medical, dental, vision, life insurance, long-term and short-term disability
• 401K retirement plan with company matching
• Health and Dependent care FSA and HSA with company matching
• Merit-based raises and bonuses
• Unlimited PTO
• Monthly health & wellness and cell phone reimbursement
• Paid training
• Parental benefits 100% paid for up to 6 weeks
• Friends & Family Discounted PS Use
• Tuition Reimbursement
• A great career path with promotion opportunities.

Salary range $170,000 - $190,000/annually. This is a full-time Exempt, Hybrid role.

PS is an equal-opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis. PS considers for employment qualified applicants with criminal histories consistent with applicable federal, state, and local law.