Manager, Security Engineering, Corporate Team at GuidePoint Security

GuidePoint Security provides expert cybersecurity services and solutions to help organizations minimize risk and make informed decisions. We are looking for a Security Engineering Manager to join our Corporate Information Security team and lead our efforts in maintaining robust technical controls and compliance standards.

Responsibilities

• Provide day-to-day leadership and management for our Security Engineering personnel, including handling personnel actions and serving as an escalation point.
• Design, implement, and monitor security measures to protect our information resources while troubleshooting controls across hosted and on-premises environments.
• Improve core security processes, such as vulnerability management, data loss prevention, email security, and incident response.
• Partner with our IT team to automate repeatable tasks and ensure cybersecurity is integrated into all IT architecture designs.
• Support governance and compliance initiatives, including internal and external audits, contract reviews, and supplier risk management.
• Develop and maintain internal policies, standards, and procedures, while reporting on security control performance to drive system enhancements.

Must-haves

• At least 8 years of experience in information security or IT roles with security responsibilities.
• Minimum of 3 years in a direct leadership role.
• At least 5 years of experience administering technical controls like identity and access management, network segmentation, and vulnerability management.
• 5 years of experience performing audits or maintaining compliance with frameworks such as SOC 2, ISO 27001, or PCI DSS.
• 3 years of experience supporting incident response efforts.
• Proven experience in supplier risk management and writing security policies.
• Excellent communication skills in English.

Nice-to-haves

• A bachelor’s or advanced degree in business or technology.
• Current security certifications such as CISSP, CompTIA Security+, or GIAC credentials.
• Technical certifications like CCNA, MCSA/MCSE, or AWS Cloud Practitioner.
• A history of publishing articles related to security or compliance.

Benefits

• Fully remote work environment.
• 100% employer-paid medical and dental premiums for employees, with 75% coverage for family contributions.
• Flexible Time Off program and 12 corporate holidays.
• Allowances for home internet and mobile phone expenses.
• Retirement plan eligibility after two months.
• Pet benefit options.