Information Security Manager Jobs

Axsome Therapeutics is a biopharmaceutical company leading a new era in the treatment of central nervous system (CNS) conditions. We deliver scientific breakthroughs by identifying critical gaps in care and develop differentiated products with a focus on novel mechanisms of action that enable meaningful advancements in patient outcomes. Our industry-leading neuroscience portfolio includes FDA-approved treatments for major depressive disorder, excessive daytime sleepiness associated with narcolepsy and obstructive sleep apnea, and migraine, and multiple late-stage development programs addressing a broad range of serious neurological and psychiatric conditions that impact over 150 million people in the United States. Together, we are on a mission to solve some of the brain’s biggest problems so patients and their loved ones can flourish. For more information, please visit us at www.axsome.com and follow us on LinkedIn and X . About This Role Axsome Therapeutics is seeking an Associate Director/Director Information Security to take a leadership role in threat management, incident response, and vulnerability management functions. Operating as a hands-on leader, this role directs the cybersecurity team and service providers while remaining actively engaged in technical work. The role executes and advances the corporate Information Security Program and Management System owned by the Head of Information Security, and responsible for maintaining our security posture during non-standard hours, including active weekend and evening monitoring and rapid response to high-priority security incidents, and perform additional responsibilities as assigned by IT leadership. The Associate Director/Director Information Security will report to the Sr. Director, Information Security. This role is based at Axsome’s HQ in New York City with an on-site requirement of at least three days per week. We are unable to consider candidates who are

Role Summary We are seeking an experienced SOC / Security Operations Lead to oversee and strengthen the organization's Security Operations Center (SOC), threat detection, incident response, vulnerability management, data protection, and security monitoring capabilities. The ideal candidate will possess extensive experience in managing enterprise security operations, SIEM/SOAR platforms, threat hunting, incident response, DLP, endpoint security, and vulnerability management programs. The role requires leadership of a multi-functional security operations team responsible for protecting critical business systems, customer data, and digital assets while ensuring compliance with RBI regulations and industry security standards. Key Responsibilities Security Operations Center (SOC) Management -Lead and manage 24x7 Security Operations Center (SOC) functions. -Establish and enhance SOC processes, playbooks, escalation procedures, and operational metrics. -Ensure timely detection, triage, investigation, containment, and remediation of security incidents. -Develop SOC maturity roadmaps aligned with industry best practices and regulatory expectations. -Monitor security KPIs, SLAs, MTTR, MTTD, and incident response effectiveness. SIEM, XSIAM & Threat Detection -Lead implementation, administration, and optimization of: -Palo Alto Cortex XSIAM -SIEM Platforms -SOAR Platforms -UEBA Solutions -Threat Intelligence Platforms -Develop and tune correlation rules, detection logic, and analytics use cases. -Enhance detection coverage across cloud, endpoints, applications, networks, and third-party environments. -Drive threat hunting and proactive security monitoring initiatives. Incident Response & Threat Management -Lead enterprise cyber incident response activities. -Develop and maintain incident response plans, runbooks, and communication procedures. -Coordinate investigations involving malware, ransomware, phishing, insider threats, account compromise, fraud, and adv

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a talented and motivated Infrastructure Security Engineer to join our security team. In this role, you will design, implement, and maintain secure cloud and hybrid infrastructure, and ensure the integrity of our cloud-native applications. This role focuses on securing critical infrastructure across multi-cloud and hybrid environments, with work that may span platforms such as SpaceXSI, X Social, X Money and related systems. You’ll operate with an automation-first mindset: building secure foundations, hardening platforms at scale, and partnering closely with engineering teams so security is embedded in how we build and run systems—not bolted on after the fact. RESPONSIBILITIES: Cloud & infrastructure security Design and implement secure cloud architectures across multiple cloud platforms (e.g., AWS, GCP, Azure) Build and secure mission-critical applications in hybrid cloud and on-premises environments Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls Assist with regular security assessments and audits of cloud infrastructure and services Implement and manage cloud security tools and services (e.g., CSPM,

About the Role As a Security Engineer at K Health, you will serve as a foundational force in securing our healthcare technology ecosystem. Reporting directly to the Director of Security, this is a deeply hands-on individual contributor role focused primarily on Security Operations (SecOps) and IT Security projects. You will be responsible for building, automating, and maintaining our security controls while acting as a key responder to security incidents. If you thrive in a fast-paced environment where you are empowered to own your domain, automate repetitive tasks, and directly safeguard patient and organizational data, this role is for you. What You Will Do Design, implement, and maintain hands-on SecOps workflows, threat detection, and incident response procedures across our corporate and cloud infrastructure. Build low-code and custom automations (using tools like Torq) to streamline security alerts, routine IT security tasks, and incident triage. Administer, optimize, and manage key security and endpoint management tools, including Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and related platforms. Maintain and support continuous compliance with SOC2 and HIPAA security controls, actively participating in audit preparation, evidence gathering, and control enforcement. Partner with cross-functional IT and engineering teams to harden systems, enforce zero-trust endpoint policies, and secure employee workflows. Conduct root-cause analysis on security incidents and proactively implement preventative security measures to eliminate recurring risks. What We Are Looking For Experience: 3–5 years of dedicated hands-on experience in Security Operations, IT Security, or System Administration with a strong security focus. Incident Response: Proven background in actively detecting, investigating, and remediating security incidents in a modern cloud/hybrid environment. Technical Depth: Deep foundational IT background spanning endpoint administration (macOS/Windows

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a talented and motivated Infrastructure Security Engineer to join our security team. In this role, you will design, implement, and maintain secure cloud and hybrid infrastructure, and ensure the integrity of our cloud-native applications. This role focuses on securing critical infrastructure across multi-cloud and hybrid environments, with work that may span platforms such as SpaceXSI, X Social, X Money and related systems. You’ll operate with an automation-first mindset: building secure foundations, hardening platforms at scale, and partnering closely with engineering teams so security is embedded in how we build and run systems—not bolted on after the fact. RESPONSIBILITIES: Cloud & infrastructure security Design and implement secure cloud architectures across multiple cloud platforms (e.g., AWS, GCP, Azure) Build and secure mission-critical applications in hybrid cloud and on-premises environments Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls Assist with regular security assessments and audits of cloud infrastructure and services Implement and manage cloud security tools and services (e.g., CSPM,

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for a Security Software Engineer, Detection & Response, to build the telemetry, logging, and response systems for our Detection & Response team, as a builder, not a queue-triage role. You will build detection and response as software across a multi-cloud fleet of servers, containers, and endpoints, and test where AI and agents can safely take work off responders. This is a hybrid role based in San Francisco, New York City, or London, with three days a week in the office. What you’ll do: Deploy and operate telemetry at fleet scale with osquery and extended Berkeley Packet Filter (eBPF) sensors across servers, containers, and endpoints, and own performance overhead, staged rollouts, canaries, and rollbacks Build and maintain the logging and security information and event management (SIEM) pipeline behind detection, including ingestion, normalization, enrichment, storage, and cost, with detections written as code with tests, code review, and continuous integration and continuous delivery (CI/CD) Automate response with tooling for host isolation, credential revocation, evidence collection, and enrichment, and test where AI and agents can safely take work off responders Strengthen the corporate security stack, including endpoint detection and response (EDR) and fleet management across Mac, Windows, and Linux, email security, and GitHub controls Join the on-call rotation, work with the managed security operations center (SOC) on escalations, and automate evidence collection for System and Organization Controls 2 (S

About the role: We are looking for a dedicated IT Engineer to manage and support our IT infrastructure. The ideal candidate will be responsible for maintaining and optimizing key technologies, including Microsoft Intune, Okta, Google Workspace, Jamf, Slack, and Meraki This role requires in-office presence in our New York office four days per week. What you will do: Administer Intune for mobile device management and security of our Windows devices. Manage and maintain Okta for identity and access management. Administer and support Google Workspace applications and services. Oversee administration of Jamf for managing Apple devices. Manage Slack for team communication and collaboration. Manage Meraki and WebEx infrastructure Monitor system performance and troubleshoot issues as they arise. Implement and maintain security protocols to protect company data. Provide technical support to staff and resolve IT-related issues. Collaborate with other departments to understand and meet their IT needs. Maintain documentation of IT processes and systems. What we’re looking for: Proven experience in a similar role, supporting an international organization of 100+ employees. Strong understanding of network and system security principles. Excellent troubleshooting and problem-solving skills. Strong communication and interpersonal skills. Strong dedication to customer service Ability to manage multiple tasks and projects simultaneously. Experience working with automation Proficiency with Intune, Okta, Google Workspace, Jamf, and Slack. Able to provide off-hours support, on rotation, or as needed Bonus: Experience working in a healthcare space or startup space. Benefits & Perks: #LI-Hybrid Hybrid work schedule with weekly lunches and stocked fridges Monthly social committees for company events 18 vacation days, 9 company holidays, 5 sick days, and 2 personal days Stock options for every full-time employee Paid parental leave 401k benefit Commut

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Executive Director - Business Information Security Officer (BISO) will serve as a senior leader and trusted security advisor supporting all CVS Health lines of business, with accountability for leading the BISO team and driving mission, vision, and governance model. This individual will provide senior‑level leadership, strategic and tactical guidance for a world‑class enterprise cybersecurity program. As a business enabler, the BISO is an effective communicator with the technical aptitude to embed security strategy and risk‑based decision‑making into all aspects of the business. The BISO understands security risks, threats, vulnerabilities, control frameworks, and security technologies and translates their impact in business terms. The BISO must be capable of working closely with senior IT business leaders, executive leadership, and business subject matter experts (SMEs). This role requires demonstrated leadership, exceptional organizational skills, strong business and financial acumen, and the ability to influence and drive change at scale across the organization. <

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: Tenable's InfoSec team is looking for a Security Engineer to join our Security Engineering & Architecture group. This role was built deliberately to span disciplines rather than specialize in one: you'll split your time between securing our cloud environments and supporting general security engineering disciplines across the business — covering cloud and non-cloud systems alike. If you're early-career but curious across the breadth of InfoSec rather than narrowly focused on one domain, this role is built for you. Your Opportunity: Support day-to-day cloud security operations — monitoring, triage, and remediation of findings across AWS, Azure, and/or GCP environments using CNAPP/CSPM tooling. Contribute to Security Architecture Reviews for new systems, integrations, and vendor onboarding — regardless of whether the system in question is cloud-hosted, on-prem, or SaaS. You'll work directly with the architects and engineers who own this process today, learning the methodology and eventually taking reviews from intake to sign-off. Help identify and document misconfigurations, excessiv

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it. You will apply hands-on AI engineering experience alongside deep product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture. This role is ideal for a practitioner who has spent

WHO WE ARE Edmentum is a dynamic educator and student-focused company dedicated to tech-enabled learning solutions. Our goal is to ensure that all students have access to flexible learning environments and educators have the tools they need to support their students. We are on a mission to create innovative, proven learning technology, partnering with educators to ignite student potential. We are a Remote First organization with a strong commitment to excellence, innovation, and customer satisfaction. What You'll Do At Edmentum, security is the foundation that keeps student data, educator tools, and the platforms behind learning for millions of students safe. As an Information Security Engineer, you'll get hands-on with the systems and practices that protect them. You'll work alongside talented Technology teams to strengthen our security posture, sharpen your skills across security operations and compliance, and help bring new tools, including AI, into how we defend Edmentum. In this role you will: Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available. Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps. Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready. Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses. Partner with development, systems, and network teams to build security into how we build and operate. Improve change management, configuration management, and security metrics, and help find root causes after incidents. Who You Are You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment. You have a bachelor's degree in a technology-related field or equivalent hands-on experience. You have a solid grasp of core security principles and experience se

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Information Security Engineer) to secure the infrastructure and systems Hark runs on. You'll harden our AWS environments, own identity and access across the company, build detection and response, and lead incident response when things go wrong. We run model training, agent sandboxes, and hardware manufacturing pipelines, so the environment is broader and more interesting than a typical SaaS stack. This role is hands-on; you'll be building and operating, not managing or auditing. Responsibilities Harden cloud infrastructure across multiple AWS accounts (IAM, EKS, VPC and network access paths, KMS) and review IaC for misconfigurations. Own identity and access: SSO, least-privilege IAM, just-in-time access, secrets management, and access reviews. Build and maintain detection and alerting pipelines; lead triage, containment, and post-incident review. Secure the corporate environment: endpoint management, SaaS security posture, and zero-trust network access. Evaluate third-party vendors and integrations for security and privacy risk. Build the technical controls and evidence behind our compliance programs (SOC 2, GDPR) as automation, not spreadsheets. Requirements 4–8 years of hands-on security engineer

Als Technical Information Security Officer (TISO) in Rotterdam versterk je onze digitale veiligheid in een organisatie die volop in cloudtransitie is. Je werkt aan cloudsecurity, identity & access, vulnerability management en incident response, binnen een omgeving van moderne technologie én legacy. Vind je het leuk om zichtbaar verschil te maken? Dan voel je je hier waarschijnlijk snel op je plek. We don't want to disappoint, but we only accept applicants that have a good command of the Dutch language and are already (or about to be) based in the Netherlands. Hier krijg jij positieve energie van Het verbeteren van onze technische security, van Azure-cloudsecurity en identity & access tot endpoint- en vulnerability management. Het analyseren en opvolgen van security-incidenten en samen met ons SOC en DevOps-teams dreigingen vertalen naar concrete acties. Het zoeken naar praktische oplossingen die onze organisatie stap voor stap veiliger maken. Dit ga je doen als Technical Information Security Officer We zitten midden in een transitie naar de cloud, waar moderne technologie en legacy samenkomen. In deze rol versterk je onze Azure- en Microsoft-security en werk je onder andere met Microsoft Defender XDR, Conditional Access en Intune. Je ontwikkelt en verbetert detecties in Microsoft Defender XDR, onder andere met KQL, vertaalt dreigingsinformatie naar concrete acties en helpt security stevig te verankeren in onze DevSecOps-keten. Bij incidenten voer je zelf de eerste analyse uit en werk je samen met ons externe SOC aan de verdere afhandeling. Daarnaast help je technische risico’s te vertalen naar heldere adviezen voor teams en management. Ook help je het securitybewustzijn binnen de organisatie te vergroten en draag je bij aan trainingen, e-learnings en phishingcampagnes. Je begeleidt pentests en red-team-oefeningen, bewaakt CIS-baselines en staat als ‘officer of the day’ klaar voor vragen en meldingen. Jouw uitdagingen Navigeren tussen moderne cloudsecurity en een bes

The BU CISO is a senior leadership role responsible for overseeing the cybersecurity posture, strategy, and risk management within a specific business unit (BU) of the organization. This role will ensure that cybersecurity initiatives are aligned with the strategic goals of the business unit, while maintaining overall compliance with corporate security standards, policies, and regulatory requirements. The BU CISO will work closely with business unit leaders, IT, legal, and compliance teams to create and implement robust cybersecurity frameworks, address emerging risks, and safeguard the organization’s critical assets. Source: Adani Group | Job ID: 56131

Location: Athens, Gr Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? 🤔 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: 👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. 👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. 👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. 👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. 👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? 🧳 You'll need to be able to demonstrate the core skills this role requires. You don't have