Senior Manager Information Security

Why This Opportunity?

This is an opportunity to modernize security practices while helping lead a broader migration to AWS.

Want to apply Read all the information about this position below, then hit the apply button.

You will inherit an environment where many security processes remain manual and documentation-heavy. Your focus will be building automated controls that improve security while accelerating delivery.

This role requires a leader who can operate strategically while remaining technically hands-on. You will develop the team while contributing directly to cloud security, identity, automation, and DevSecOps initiatives.

What We're Looking For

• Hands-on leadership experience within information security, security engineering, or cloud security
• Deep production AWS security experience, particularly AWS IAM
• Experience designing IAM roles, policies, permission boundaries, least-privilege controls, and cross-account access
• Experience building or maturing enterprise IAM capabilities
• Hands-on security automation and policy-as-code experience
• Experience replacing manual security processes with automated controls and measurable improvements
• Strong DevSecOps experience embedding security controls into CI/CD pipelines
• Ability to modernize security practices within cautious or highly regulated organizations
• Experience mentoring and developing technical security teams
• Ability to balance security, regulatory requirements, operational needs, and delivery speed

Required Experience

• Demonstrated hands-on AWS cloud security experience in production environments
• Strong AWS IAM engineering experience, including RBAC, least privilege, federation, and privileged access
• Experience personally designing or implementing security automation
• Experience implementing policy-as-code, compliance-as-code, or continuous security controls
• Experience integrating security into software delivery and DevSecOps workflows
• Experience partnering with infrastructure, application, engineering, and development teams
• Experience designing or substantially maturing an IAM program
• Experience leading security transformation or modernization initiatives
• Experience mentoring and developing an existing technical security team
• Hands-on security engineering experience beyond governance, risk, compliance, and executive oversight

Nice-to-Haves

• AWS Cognito experience with user pools, identity pools, federation, or token handling
• External or customer-facing identity management experience
• Experience eliminating long-lived credentials through federated, short-lived access
• Experience with automated access provisioning, recertification, and joiner-mover-leaver processes
• Experience implementing static analysis, dependency scanning, secrets detection, IaC scanning, or container scanning
• Experience automating audit evidence collection and continuous control monitoring
• Experience with NIST 800-53 and CIS Controls
• Familiarity with IRS Publication 1075 or Federal Tax Information requirements
• Government, public sector, financial services, healthcare, or similar regulated industry experience
• CISSP, CCSP, AWS Security Specialty, or similar certifications

What You'll Do

• Lead and develop a team of security professionals while remaining technically engaged
• Drive cloud security strategy as the organization expands its AWS environment
• Design and strengthen AWS IAM, least-privilege access, federation, and privileged access controls
• Build and mature workforce and external identity capabilities
• Automate manual security controls, approval processes, compliance evidence, and recurring security activities
• Replace documentation-heavy security processes with automated checks, reusable patterns, and risk-based reviews
• Embed security controls earlier within CI/CD and engineering workflows
• Establish practical guardrails that allow engineering teams to experiment and deliver safely
• Implement lightweight threat modeling, pre-approved architectures, xhqgsiq and risk-tiered security reviews
• Improve security automation while reducing friction for engineering and application teams
• Lead security incidents and strengthen the team's response capabilities
• Partner across infrastructure, engineering, applications, and executive leadership
• Establish measurable improvements across remediation speed, automation, access controls, and security delivery
• Help evolve security into an engineering-oriented business enabler

Compensation

Base salary up to $140,000, depending on experience.

Benefits

• Affordable medical, dental, life, and short-term disability insurance plans
• Participation in the Arizona State Retirement System (ASRS)
• Long-term disability coverage
• 10 paid holidays annually
• Vacation accrual beginning at 4 hours per pay period during the first three years
• Sick leave accrued at 3.7 hours per pay period
• Up to 12 weeks of paid parental leave
• Deferred compensation retirement savings plan
• Wellness and employee health programs
• Tuition reimbursement opportunities
• Infant at Work Program
• Rideshare and public transit subsidy programs
• Career advancement and professional development opportunities
• Flexible work arrangements supporting work-life balance