Senior InfoSec Leader: Scale Secure SaaS & Cloud

Capmont GmbH; United States; Teletrabalho; USD 179 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

401k with company match

Health, dental, vision benefits

Life insurance and other benefits

Equity

Resumo da oferta

Plume seeks a Senior Manager of Information Security to mature a security program post ISO 27001 and SOC 2 readiness. You will lead policy creation, risk management, and a high-performing security team while protecting our cloud infrastructure, networks, and applications.

This hands-on leadership role requires collaborating with engineering and product to enable secure software delivery at scale. You’ll drive secure SDLC practices, incident response, and governance, ensuring audits and customer

Qualificações

• Bachelor's degree in Information Security, CS, CE or related field or equivalent work experience.
• 6-8+ years in information security, with 3+ years in a leadership role owning a security program end-to-end.
• Direct experience operating within ISO 27001 and SOC 2 frameworks — audit-ready day to day.
• Strong technical depth in cloud security (AWS/GCP), network security, and modern application security.
• Experience building or rebuilding policies and procedures in a scaling SaaS environment.
• A track record of leading security teams that engineers actually like working with.
• Experience managing external auditors, penetration testers, and compliance vendors.
• Excellent communication skills — able to flex between engineering whiteboards and board risk briefings.

Responsabilidades

• Own and mature the information security program aligned with ISO 27001 and SOC 2, including SOC 2 Type 2.
• Formalize, maintain policies, standards, and procedures to close gaps and sustain certification readiness.
• Run internal control environment: risk assessments, control testing, audit evidence collection, remediation tracking.
• Manage relationships with external auditors, pen testers, and compliance partners.
• Own security of infrastructure, networks, cloud environments, and applications end-to-end.
• Set IAM, network/cloud security architecture, endpoint protection, vulnerability management, logging and incident response.
• Establish secure SDLC practices — threat modeling, secure code review, supply-chain security, CI/CD security.
• Own incident response: build the plan, tabletop exercises, and lead responses.

Conhecimentos

Information security leadership

ISO 27001

SOC 2

Cloud security (AWS/GCP)

AppSec / secure SDLC

Policy development

Auditors/pen testers management

Board communication

Formação académica

Bachelor's degree in Information Security/CS/CE or related field

Ferramentas

Cloud security tooling (AWS/GCP)

Descrição da oferta de emprego

Plume seeks a Senior Manager of Information Security to mature a security program post ISO 27001 and SOC 2 readiness. You will lead policy creation, risk management, and a high-performing security team while protecting our cloud infrastructure, networks, and applications.

This hands-on leadership role requires collaborating with engineering and product to enable secure software delivery at scale. You’ll drive secure SDLC practices, incident response, and governance, ensuring audits and customer