Senior Manager Information Security

Why This Opportunity?

This is an opportunity to modernize security practices while helping lead a broader migration to AWS.

You will inherit an environment where many security processes remain manual and documentation-heavy. Your focus will be building automated controls that improve security while accelerating delivery.

This role requires a leader who can operate strategically while remaining technically hands-on. You will develop the team while contributing directly to cloud security, identity, automation, and DevSecOps initiatives.

What We're Looking For

• Hands-on leadership experience within information security, security engineering, or cloud security
• Deep production AWS security experience, particularly AWS IAM
• Experience designing IAM roles, policies, permission boundaries, least-privilege controls, and cross-account access
• Experience building or maturing enterprise IAM capabilities
• Hands-on security automation and policy-as-code experience
• Experience replacing manual security processes with automated controls and measurable improvements
• Strong DevSecOps experience embedding security controls into CI/CD pipelines
• Ability to modernize security practices within cautious or highly regulated organizations
• Experience mentoring and developing technical security teams
• Ability to balance security, regulatory requirements, operational needs, and delivery speed

Required Experience

• Demonstrated hands-on AWS cloud security experience in production environments
• Strong AWS IAM engineering experience, including RBAC, least privilege, federation, and privileged access
• Experience personally designing or implementing security automation
• Experience implementing policy-as-code, compliance-as-code, or continuous security controls
• Experience integrating security into software delivery and DevSecOps workflows
• Experience partnering with infrastructure, application, engineering, and development teams
• Experience designing or substantially maturing an IAM program
• Experience leading security transformation or modernization initiatives
• Experience mentoring and developing an existing technical security team
• Hands-on security engineering experience beyond governance, risk, compliance, and executive oversight

Nice-to-Haves

• AWS Cognito experience with user pools, identity pools, federation, or token handling
• External or customer-facing identity management experience
• Experience eliminating long-lived credentials through federated, short-lived access
• Experience with automated access provisioning, recertification, and joiner-mover-leaver processes
• Experience implementing static analysis, dependency scanning, secrets detection, IaC scanning, or container scanning
• Experience automating audit evidence collection and continuous control monitoring
• Experience with NIST 800-53 and CIS Controls
• Familiarity with IRS Publication 1075 or Federal Tax Information requirements
• Government, public sector, financial services, healthcare, or similar regulated industry experience
• CISSP, CCSP, AWS Security Specialty, or similar certifications

What You'll Do

• Lead and develop a team of security professionals while remaining technically engaged
• Drive cloud security strategy as the organization expands its AWS environment
• Design and strengthen AWS IAM, least-privilege access, federation, and privileged access controls
• Build and mature workforce and external identity capabilities
• Automate manual security controls, approval processes, compliance evidence, and recurring security activities
• Replace documentation-heavy security processes with automated checks, reusable patterns, and risk-based reviews
• Embed security controls earlier within CI/CD and engineering workflows
• Establish practical guardrails that allow engineering teams to experiment and deliver safely
• Implement lightweight threat modeling, pre-approved architectures, and risk-tiered security reviews
• Improve security automation while reducing friction for engineering and application teams
• Lead security incidents and strengthen the team's response capabilities
• Partner across infrastructure, engineering, applications, and executive leadership
• Establish measurable improvements across remediation speed, automation, access controls, and security delivery
• Help evolve security into an engineering-oriented business enabler

Compensation

Base salary up to $140,000, depending on experience.

Benefits

• Affordable medical, dental, life, and short-term disability insurance plans
• Participation in the Arizona State Retirement System (ASRS)
• Long-term disability coverage
• 10 paid holidays annually
• Vacation accrual beginning at 4 hours per pay period during the first three years
• Sick leave accrued at 3.7 hours per pay period
• Up to 12 weeks of paid parental leave
• Deferred compensation retirement savings plan
• Wellness and employee health programs
• Tuition reimbursement opportunities
• Infant at Work Program
• Rideshare and public transit subsidy programs
• Career advancement and professional development opportunities
• Flexible work arrangements supporting work-life balance