Sr. Manager, Information Security

OMNIVISION; Santa Clara (CA); On-site; USD 191,000 - 240,000; Full time

Job summary

OMNIVISION is seeking a Sr. Manager of Information Security to lead the enterprise cybersecurity program. You will shape and drive risk management, policy development, incident response, and governance across global business units.

A strong leader will align security with business goals and coordinate with IT to protect assets. The role requires a decade of security experience, relevant degree, and professional certifications.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional security management certification (e.g., CISSP, CISM, CISA).
• Minimum of 10 years of experience in risk management, information security, and IT roles.
• Knowledge of ISO/IEC 27001 and NIST frameworks.
• Excellent written and verbal communication skills; high integrity.

Responsibilities

• Develop, implement, and monitor a strategic enterprise information security and IT risk management program.
• Maintain security policies, standards, guidelines, and procedures for compliance.
• Investigate and report on security breaches and incidents.
• Update incident response and disaster recovery plans with IT collaboration.
• Oversee EDR/XDR, PIM/PAM, MFA, SSO, DLP, IDS/IPS implementations.

Skills

Leadership

Communication

Influence

Education

Bachelor’s degree in Computer Science / IT or related field

CISSP/CISM/CISA certification

Job description

Sr. Manager, Information Security

We are seeking a highly skilled and experienced Security leader to join our team. You will be responsible for developing and implementing an effective Cybersecurity program and practices to protect the company from internal and external threats.

Description

We are seeking a highly skilled and experienced Security leader to join our team. You will be responsible for developing and implementing an effective Cybersecurity program and practices to protect the company from internal and external threats.

Responsibilities

• Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program and strategy.
• Develop and maintain security policies, standards, guidelines, and procedures to ensure ongoing security compliance.
• Investigate and report on security breaches and other cybersecurity incidents
• Regularly update documentation for incident response and disaster recovery plans in coordination with Information Technology Department.
• Experience managing, and overseeing technical implementations of EDR/XDR, PIM/PAM, MFA, SSO, DLP, IDS/IPS and other similar technologies.
• Establish and manage Cybersecurity / Information Risk Management practices within the organization.
• Lead a team of highly skilled and motivated experts.
• Work directly and closely with the business units to facilitate risk assessment and risk management processes.
• Develop and enhance an information security management framework.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems, products and services.
• Provide leadership to the enterprise’s information security organization across all global business units.
• Partner with business stakeholders across the company to raise awareness of risk management concerns.
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional security management certification (e.g., CISSP, CISM, CISA).
• Minimum of 10 years of experience in a combination of risk management, information security, and IT jobs.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
• Excellent written and verbal communication skills and high level of personal integrity.
• Innovative thinking and leadership with an ability to evolve security strategy based on research, data, business direction, and industry trends
• Ability to influence people and organizations in a global matrix organization.
• Demonstrable record of delivering critical solutions within tight time frames, with multiple stakeholder groups, and competing priorities
• Experience with contract and vendor negotiations and management, including managed services.
• Ability to provide clear, transparent leadership and engagement
• Chinese/Mandarin speaking is preferred.

Annual base salary for this role in California, US is expected to be between $190,600 - $240,000.

Actual pay will be determined on a number of factors such as relevant skills and experience, and the pay of employees in the similar role.

EOE/Minorities/Females/Vet/Disability