Information Security Manager Jobs

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. Join Roblox as an Engineering Manager of Application Security and lead a team responsible for improving the security of our products, services, and development ecosystem. In this role, you will drive security across the software lifecycle, partnering with engineering teams to identify risks, improve secure development practices, and build scalable solutions that protect Roblox at scale. You will balance hands-on security work with longer-term investments in automation, tooling, and developer enablement. You will work closely with engineering, infrastructure, and security teams to reduce risk while enabling teams to move quickly and safely. This role reports to the Senior Manager of Application Security and is based in San Mateo with a hybrid schedule. You Have: 8+ years of experience in Information Security 2+ years of experience managing engineers Strong background in Application Security or Product Security Experience driving security programs across the software development lifecycle Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and secure coding practices Experience working closely with engineering teams in modern environments (cloud, microservices, CI/CD) Prov

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple. The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf. What you'll do at Jamf: The Business Continuity Manager leads the development, implementation, and maintenance of Jamf’s business continuity management program to ensure operational resilience. Reporting to the Director of Business Continuity, the Manager plays a critical role in preparing for and protecting Jamf from potential disruptions, ensuring business operations can continue during and after a crisis. Responsibilities involve a strategic blend of risk assessment, contingency planning, and stakeholder communication to maintain operational resilience. Also works with cost center departments to perform business impact analyses (BIAs) and risk assessments; assists in business continuity plan (BCP) development and maintenance; conducts and evaluates BCP exercises; promotes program initiatives through training and awareness; and maintains emergency preparedness activities. What you can expect to do in this role: Drive adoption and execution of Jamf’s business continuity program by facilitating business impact analysis and risk assessments, assisting with business continuity and IT disaster recovery plan development and maintenance, and designing, organizing, and facilitating tabletop exercises to validate continuity and resilience plans and strengthen organizational resilience. Ensure continuity plans align with enterprise crisis management processes, corporate IT-DR capabilities, cyber incident response, and incident managem

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple. The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf. What you'll do at Jamf: The Technology Disaster Recovery Manager leads the development, implementation, and maintenance of Jamf’s business continuity management program to ensure disaster resilience. Reporting to the Director of Business Continuity, the Disaster Recovery Manager will be the single-threaded owner for day-to-day DR operations—driving orchestrated recovery execution, maintaining Jamf’s technology stack runbooks, coordinating cross-technology teams, and ensuring audit-ready evidence for DR exercises and an annual DR roadmap and recovery exercise calendar. The Manager will align DR capabilities with PD&D architecture and regulatory and compliance standards while continuously improving resiliency across the organization. What you can expect to do in this role: Oversee the development of disaster recovery operations and runbooks, in partnership with Product Development & Delivery (e.g. Product Management, Software Engineering) by developing, maintaining, and continuously improving recovery documentation aligned with the enterprise DR framework. Serve as a trusted advisor to PD&D leaders, elevating disaster recovery operations to a strategic priority rather than a reactive process. Partner with PD&D to engineer and operate DR solutions across multi-cloud environments (e.g., AWS and Azure), leveraging cloud-native patterns such as active/active, regional failover, immutable infrastructure, and serverles

Celonis is the trusted platform to industrialize Enterprise AI. At our core is the Celonis Context Model — which combines process data, business knowledge, and intelligence into a living digital twin of the enterprise that AI can actually understand, turning AI's operational blind spots into operational clarity. World's leading companies trust Celonis and its global ecosystem of partners to make their AI agents, people, systems, and processes work together, achieving transformational outcomes. We believe there's a massive opportunity to unlock global productivity and sustainability by giving AI the context to understand how every business process really works. Join our mission to make processes work for people, companies, and the planet. About the Role Celonis is seeking a Manager of Global Cyber Defense to lead our Security Operations (SecOps) and Incident Response teams. In this global leadership position, you will be the primary architect and custodian of the strategies, tools, and policies that safeguard Celonis’s enterprise data, corporate infrastructure, and cloud-native environments. Your team will ensure the security and integrity of our global execution management platform, protecting the critical business processes of our customers. By designing and deploying advanced technical controls, you will ensure that emerging cyber threats are automatically detected, isolated, and neutralized. As a core security leader, you will collaborate across Engineering, Product, and IT to build a resilient, security-first culture, integrating deep threat insights directly into our continuous software development lifecycle. While this is a management role, Celonis values expert practitioners . You should be ready to lead by example, bring deep technical mastery of modern security ecosystems, and blend proprietary and open-source tooling into a seamless, next-generation global defense strategy. This position reports VP of Information Security. What You Will Do in This R

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role Block’s Business Resilience is part of the Security Governance Risk and Compliance team. The Business Resilience helps ensure that critical products, services, operations, and supporting technology can continue through disruption and recover within expected timeframes. The team partners across business, technology, risk, compliance, legal, regional entities, and third-party teams to identify resilience risks, validate recovery capabilities, support governance expectations, and drive practical remediation. This role will help operate and mature Block’s resilience program across business continuity, disaster recovery, crisis management, operational resilience, third-party resilience, testing, reporting, and regulatory compliance support. The role requires someone who can translate resilience requirements into clear business and technology actions, communicate risk in a practical way, and support accountable owners through testing, remediation, and governance. The ideal candidate is also comfortable improving how resilience work gets done. They should be able to identify manual or repeatable workflows, support AI-enabled and automation opportunities, improve reporting and dashboards, help administer resilience tooling, and build scalable templates, evidence processes, and self-service mechanisms that reduce friction while improving

Natera is seeking a hands-on, highly accountable Senior Manager of Network Operations to be our Austin site lead. This position will lead the day-to-day operations, reliability, and continuous improvement of a global enterprise network supporting critical healthcare and genomic operations. This role is responsible for managing a distributed network operations team, ensuring high availability across LAN, WAN, wireless, firewall, cloud, and on-premise environments. The Senior Manager will partner closely with Infrastructure, Information Security, DevOps, Engineering, and Lab/Business Operations teams to support a secure, scalable, and resilient network environment. The ideal candidate brings strong technical depth, operational discipline, and people leadership experience. This individual will help execute network modernization initiatives, improve observability and incident response, maintain compliance with change management and regulatory controls, and ensure the network team delivers consistent, reliable support to the business. Key Responsibilities Manage the stability, performance, security, and availability of Natera’s global enterprise network, including LAN, WAN, SD-WAN, wireless, firewalls, VPN, cloud, and on-premise environments. Lead a team of network engineers, providing coaching, prioritization, and technical guidance. Execute network operations initiatives aligned with the broader IT infrastructure strategy, including automation, resiliency, lifecycle management, and performance improvements. Serve as an escalation point for high-severity network incidents, coordinating troubleshooting, communication, root cause analysis, and service restoration. Remain hands-on with network design, configuration, troubleshooting, optimization, and implementation activities as needed. Partner with Information Security on firewall policy management, segmentation, remote access, vulnerability remediation, and secure network architecture practices. Support network capacity

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. About the Role Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service. We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. What You’ll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support SOX and IT General Contro

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. . About the Role, Mission or Department Overview As an Engineering Manager for Cybersecurity at The New York Times, you will lead the team responsible for building and operating the platforms, tooling and services that keep our systems secure at scale. Our engineers design and run the infrastructure that underpins vulnerability scanning, secrets management, secure-by-default platforms and other core security capabilities used across the entire technology organization. You will work with partners in Cybersecurity, Developer Platforms, Enterprise Technology and Product Engineering to deliver reliable, developer-friendly security services. This is a hands-on leadership role where you'll balance people management with technical decision-making. You'll coach engineers, shape technical roadmaps, and help your teams make risk-informed decisions that support both engineering goals and the broader business. You will report to the Director of Engineering, Cybersecurity within the Information Security organization. Information Security helps prevent The Times from becoming news. Our department protects the journalists who report the news, the colleagues who support them, the platforms they rely on every day and the readers who depend on our products. We run programs across security engineering, application security, incident response, governance and more, partnering closely with teams throughout the company to keep our systems dependable and safe. Resp

Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. Who We Are Join us in our mission to transform the way people shop and eat, where impact, innovation and growth drive everything we do. Our Engineering teams tackle complex technical challenges across a global, three-sided marketplace, building and scaling systems that serve millions of customers, riders and partners every day. From real-time logistics to resilient infrastructure and marketplace optimisation, we design, build and operate technology that powers Deliveroo’s growth at scale. We’re looking for a Senior Software Engineer, Proactive Security to join our London (Hybrid) team. In this role, you will be a part of our inclusive, collaborative global team responsible for enabling proactive security outcomes with “security paved paths” to ensure a safe, reliable and resilient delivery network. Get to know our Proactive Security Engineering team — what drives us, how we work, and what you can expect. About the Team At Deliveroo we’re striving to build London’s best and most admired Security Engineering organisation as part of our global team based across North America and Europe. Our London based Security Engineering team is looking for a Software Engineer to lead the design, development and operation of security services within Deliveroo’s Product and Cloud Security domains. You will be a part of our inclusive, collaborative global team responsible for building “ security paved paths ” to ensure a safe, reliable and resilient delivery network. This is a London based position reporting directly to the European Senior Manager of our Security Engineering team based in London. What You’ll Need to Thrive Build and maintain core security products, including but

About the Team Meesho's Security & Compliance team safeguards a platform that 5% of Indian households shop with - millions of orders, billions of data points, zero downtime as a baseline. We own the Information Security Management System, drive every external certification, and shape how Meesho earns trust with sellers, buyers, partners and regulators. We move fast, default to automation, and obsess over evidence. About the Role This is a hands-on individual contributor role for someone who wants to drive - not just oversee - a multi-framework compliance program. You'll be the DRI for ISO 27001:2022 and SOC 2 Type II, run end-to-end ITGC and TPRM cycles, and help operationalise India's DPDP Rules 2025 across a product organisation that processes data at meaningful scale. You'll work directly with Engineering, IT, Legal, Product, and external auditors. What you will do Certifications & external audits Own the certification and surveillance cycle for ISO 27001:2022 and SOC 2 Type II ; act as the single point of contact for external auditors. Plan and execute readiness assessments, gap closure, evidence collection, control walkthroughs, and management responses. Maintain audit calendars, evidence repositories, and bridge letters between audit windows. Drive PCI DSS v4.0.1 scope-reduction and assessment activities for in-scope environments. ISMS, policies & frameworks Maintain Meesho's ISMS aligned to ISO 27001:2022 - all 93 Annex A controls mapped across Organizational, People, Physical and Technological themes, with named owners and live evidence. Author, review, version-control and socialise security policies, standards, and procedures. Map controls across frameworks: ISO 27001:2022, SOC 2 TSC, PCI DSS v4.0.1, NIST CSF 2.0,

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: As a Business Security Services Director, you will play a critical role in protecting WPP’s information assets across your designated business area. Acting as the key link between WPP Digital Security & Risk Management and the business, you will ensure global security strategies, standards and initiatives are effectively embedded at a local level. You will also work closely with WPP HQ teams across Strategy & Risk, Security Awareness and Technical Security Governance to ensure a consistent and joined-up approach to security. This opportunity would suit an experienced Senior Manager ready to step into a broader leadership role, or an early-stage Director looking to further develop their impact and influence. What you'll be doing: Security Leadership: Serve as the primary point of contact for all Digital Security matters within your region. Collaborate with business leadership, WPP Digital Security and Enterprise Technology Cyber teams to align security efforts with business goals. Act as the primary liaison between the business and WPP Digital Security and Cyber Security funct

We are looking for a Data Governance & Compliance Manager to join our Information Security team. In this role, you will own the strategy and execution of Talkdesk's data governance program , covering data lifecycle management, retention, privacy rights management, data classification, and data protection controls. You will work closely with Legal & Privacy, Product, Engineering, Security, and business stakeholders to translate regulatory and contractual requirements into practical, scalable controls, processes, and tooling. This is a highly cross-functional role that requires a combination of strong data governance and privacy expertise, project leadership, technical understanding, and the ability to influence stakeholders across the organization. What You'll Own Data Governance & Compliance Strategy Build and own the roadmap for Talkdesk's data governance program, from requirements and design through implementation, measurement, and continuous improvement. Define and maintain data governance policies, procedures, standards, and controls covering data classification, retention, privacy rights management, and data protection. Embed governance requirements into engineering and data processes, enabling teams to follow secure and compliant practices by default. Monitor regulatory developments, including GDPR, CCPA, and other global privacy regulations, and translate them into actionable governance requirements. Assess projects and initiatives to ensure compliance with applicable data governance, privacy, and regulatory requirements. Identify opportunities where strong data governance can create business value, improve customer trust, and enable responsible data use. Cross-Functional Partnership & Execution Partner closely with Legal & Privacy to translate regulatory and contractual requirements into practical governance controls. Collaborate with Product and Engineering to embed data governance and privacy-by-design principles into products