Cybersecurity Manager

5+ years of experience in cybersecurity, with a strong focus on compliance, risk, and governance
Experience leading or supporting compliance frameworks such as SOC 2, PCI DSS, ISO 27001, or NIST CSF
Familiarity with security questionnaire platforms and processes (e.g., SIG, CAIQ)
Deep understanding of cybersecurity risk management methodologies and third-party/vendor security due diligence
Strong knowledge of policy and standards development, security controls, and risk assessment processes
Excellent communication and collaboration skills with the ability to engage technical and non-technical stakeholders
Highly organized and detail-oriented with experience managing cross-functional programs and deadlines

Own and drive external security compliance and certification programs (SOC 2, PCI DSS, ISO 27001, etc.)
Serve as the primary contact for responding to partner security questionnaires and assessments
Conduct vendor and third-party security reviews, documenting risks and working with stakeholders on mitigation plans
Define, maintain, and enforce security policies, standards, and guidelines across the organization
Operate our cybersecurity risk management program—including risk identification, tracking, mitigation planning, and acceptance processes
Report and track security KPIs across teams, driving accountability and visibility into our security posture
Collaborate with security application engineers to coordinate security reviews—gathering relevant information, creating and managing review tickets, and communicating outcomes and next steps to stakeholders
Support internal and external audits and coordinate evidence collection across teams