Senior InfoSec Leader: Platform & Cloud Security

Socket.dev; United States; On-site; USD 179,000 - 190,000; Full time

Benefits offered by this job

401k with company match

Health, dental, vision benefits

Job summary

Plume is seeking a Senior Manager of Information Security to mature a security program at a pivotal inflection point. You will formalize policies, build a high-functioning team, and protect infrastructure, networks, cloud environments, and apps while enabling engineers to move fast.

You’ll lead program governance, security engineering, and cross-functional partnerships, ensuring audit readiness and scalable security practices across a growing SaaS platform.

Qualifications

• 6-8+ years in information security with 3+ years in a leadership role
• Direct experience operating within ISO 27001 and SOC 2 frameworks
• Strong depth in cloud security (AWS/GCP), network and app security
• Experience building/rebuilding policies in scaling SaaS environments

Responsibilities

• Own and mature the information security program aligned with ISO 27001 and SOC 2 requirements
• Set strategy for identity access management, network/cloud security, and incident response
• Lead security team, define roles, workflows, and cross-functional engagement
• Translate security risk into business terms for leadership and the board

Skills

Security leadership

Cloud security

Threat modeling

Secure SDLC

Security tooling

Education

Bachelor's degree in Information Security or related field

CISSP or equivalent certification

Experience with ISO 27001/SOC 2

Tools

ISO 27001

SOC 2

SOC 2 Type 2

ISO 27701

NIST CSF

Job description

Plume is seeking a Senior Manager of Information Security to mature a security program at a pivotal inflection point. You will formalize policies, build a high-functioning team, and protect infrastructure, networks, cloud environments, and apps while enabling engineers to move fast.

You’ll lead program governance, security engineering, and cross-functional partnerships, ensuring audit readiness and scalable security practices across a growing SaaS platform.