Sr. IT Security Manager

OMNIVISION; Santa Clara (CA); On-site; USD 181,000 - 230,000; Full time

Job summary

OMNIVISION in Santa Clara, CA is seeking a hands-on Security leader to design and implement a comprehensive cybersecurity program protecting the company from internal and external threats. This is an on-site, senior role requiring strategic vision and practical execution across all business units.

You will lead a security team, drive risk management, policy development, incident response, and vendor negotiations.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Professional security management certification (CISSP, CISM, CISA).
• Minimum 15 years of experience in risk management, information security, and IT.
• Knowledge of ISO/IEC 27001 and NIST frameworks.
• Strong communication and leadership skills.
• Ability to influence in a global matrix organization.
• Chinese/Mandarin speaking is preferred.

Responsibilities

• Develop and manage a strategic enterprise information security program.
• Create and maintain security policies, standards, guidelines, and procedures.
• Investigate security breaches and incidents.
• Update incident response and disaster recovery documentation.
• Oversee deployments of EDR/XDR, PIM/PAM, MFA, SSO, DLP, IDS/IPS.
• Establish and manage information risk management practices.
• Lead and mentor the security team.
• Collaborate with business units to assess and manage risk.
• Develop and enhance an information security management framework.
• Ensure policy consistency across projects and systems.
• Provide leadership across global units.
• Engage with stakeholders to raise risk awareness.
• Assist with technology planning and future vision.

Skills

Security leadership

Risk management

Information security

ISO/IEC 27001

NIST

Vendor negotiation

Cross-functional leadership

Verbal communication

Mandarin language

Threat detection

Education

Bachelor's degree in Computer Science / Information Technology

Job description

(This role is fully Onsite based) We are seeking a highly skilled and experienced

Description

(This role is fully Onsite based) We are seeking a highly skilled and experienced hands on Security leader to join our team. You will be responsible for developing and implementing an effective Cybersecurity program and practices to protect the company from internal and external threats.

Responsibilities

• Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program and strategy.
• Develop and maintain security policies, standards, guidelines, and procedures to ensure ongoing security compliance.
• Investigate and report on security breaches and other cybersecurity incidents
• Regularly update documentation for incident response and disaster recovery plans in coordination with Information Technology Department.
• Experience managing, and overseeing technical implementations of EDR/XDR, PIM/PAM, MFA, SSO, DLP, IDS/IPS and other similar technologies.
• Establish and manage Cybersecurity / Information Risk Management practices within the organization.
• Lead a team of highly skilled and motivated experts.
• Work directly and closely with the business units to facilitate risk assessment and risk management processes.
• Develop and enhance an information security management framework.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems, products and services.
• Provide leadership to the enterprise’s information security organization across all global business units.
• Partner with business stakeholders across the company to raise awareness of risk management concerns.
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional security management certification (e.g., CISSP, CISM, CISA).
• Minimum of 15 years of experience in a combination of risk management, information security, and IT jobs.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
• Excellent written and verbal communication skills and high level of personal integrity.
• Innovative thinking and leadership with an ability to evolve security strategy based on research, data, business direction, and industry trends
• Ability to influence people and organizations in a global matrix organization.
• Demonstrable record of delivering critical solutions within tight time frames, with multiple stakeholder groups, and competing priorities
• Experience with contract and vendor negotiations and management, including managed services.
• Ability to provide clear, transparent leadership and engagement
• Chinese/Mandarin speaking is preferred.

Annual base salary for this role in California, US is expected to be between $180,600 - $230,000.

Actual pay will be determined on a number of factors such as relevant skills and experience, and the pay of employees in the similar role.

EOE/Minorities/Females/Vet/Disability