Senior Manager Information Security

OMNIVISION; Santa Clara (CA); On-site; USD 181,000 - 230,000; Full time

Job summary

OMNIVISION is seeking a highly experienced Security leader to build and run a comprehensive cybersecurity program. You will oversee enterprise risk management, policies, and incident response, guiding a global team and coordinating with business units to ensure consistent security across technology projects.

The role requires 15+ years of experience, a strong foundation in ISO/IEC 27001/NIST, and a track record of delivering effective security strategies in a demanding environment.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional security management certification (e.g., CISSP, CISM, CISA).
• Minimum of 15 years of experience in risk management, information security, and IT roles.
• Knowledge of information security management frameworks such as ISO/IEC 27001 and NIST.
• Excellent written and verbal communication skills with high integrity.

Responsibilities

• Develop, implement, and monitor a strategic enterprise information security and IT risk program.
• Develop and maintain security policies, standards, and procedures.
• Investigate and report on security breaches and incidents.
• Update incident response and disaster recovery documentation with IT.
• Oversee EDR/XDR, PAM, MFA, SSO, DLP, IDS/IPS deployments and operations.
• Establish Cybersecurity and Information Risk Management practices.
• Lead and mentor the cybersecurity team.
• Collaborate with business units on risk assessment and management.
• Develop and enhance an information security management framework.
• Coordinate with committees to apply policies across projects and services.
• Provide leadership to the global information security organization.

Skills

Security leadership

Risk management

Information security

ISO 27001/NIST

Vendor negotiations

Education

Bachelor’s degree in Computer Science/Information Technology

Tools

EDR/XDR

PIM/PAM

MFA

SSO

DLP

IDS/IPS

Job description

We are seeking a highly skilled and experienced Security leader to join our team. You will be responsible for developing and implementing an effective Cybersecurity program and practices to protect the company from internal and external threats.

Responsibilities

• Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program and strategy.
• Develop and maintain security policies, standards, guidelines, and procedures to ensure ongoing security compliance.
• Investigate and report on security breaches and other cybersecurity incidents
• Regularly update documentation for incident response and disaster recovery plans in coordination with Information Technology Department.
• Experience managing, and overseeing technical implementations of EDR/XDR, PIM/PAM, MFA, SSO, DLP, IDS/IPS and other similar technologies.
• Establish and manage Cybersecurity / Information Risk Management practices within the organization.
• Lead a team of highly skilled and motivated experts.
• Work directly and closely with the business units to facilitate risk assessment and risk management processes.
• Develop and enhance an information security management framework.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems, products and services.
• Provide leadership to the enterprise’s information security organization across all global business units.
• Partner with business stakeholders across the company to raise awareness of risk management concerns.
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional security management certification (e.g., CISSP, CISM, CISA).
• Minimum of 15 years of experience in a combination of risk management, information security, and IT jobs.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
• Excellent written and verbal communication skills and high level of personal integrity.
• Innovative thinking and leadership with an ability to evolve security strategy based on research, data, business direction, and industry trends
• Ability to influence people and organizations in a global matrix organization.
• Demonstrable record of delivering critical solutions within tight time frames, with multiple stakeholder groups, and competing priorities
• Experience with contract and vendor negotiations and management, including managed services.
• Ability to provide clear, transparent leadership and engagement
• Chinese/Mandarin speaking is preferred.

Annual base salary for this role in California, US is expected to be between $180,600 - $230,000.

Actual pay will be determined on a number of factors such as relevant skills and experience, and

the pay of employees in the similar role.