InfoSec Program Manager

Job Description

We are looking for a motivated Info Sec Program Manager with strong technical and problem-solving skills to join the team at LevelTen, reporting to the Director of IT & Cybersecurity. This individual is responsible for planning, developing, and implementing the organization’s overall information security program. This role will also be responsible for managing the day-to-day operations of the security program, including items such as security awareness, vendor management, incident response, and overall security compliance. LevelTen is a fast-growing company, and this is a great opportunity to gain experience across a range of cybersecurity domains and to grow in expertise and responsibility over time.

Duties and Responsibilities

• Strategic Security: Develop, maintain, and enhance the organization's security program.
• Risk Management: Identify, assess, and mitigate security risks across the technology stack.
• Compliance Assurance: Ensure ongoing adherence to industry standards (ISO 27001, SOC 2) and regulatory requirements.
• Security Awareness: Foster a security-conscious culture through training and awareness campaigns.
• Incident Response: Lead incident response efforts, including investigation, containment, and recovery.
• Vendor Security: Oversee vendor security assessments and risk management.
• Technical Security: Collaborate with infrastructure and IT teams to address vulnerabilities and enforce security controls.
• Policy and Procedure Development: Create, maintain, and enforce security policies and procedures.
• Access Control: Manage and audit role-based access controls.
• Threat Intelligence: Stay informed about emerging threats and vulnerabilities.
• Communication: Strong verbal and written communication skills.
• Continuous Learning: Commitment to ongoing professional development in information security.

Qualifications

• Proven Experience: Demonstrated track record in managing security programs, preferably in a similar industry or organizational size.
• Security Expertise: In-depth knowledge of information security principles, practices, and standards (e.g., ISO 27001, NIST Cybersecurity Framework).
• Security Certifications preferred (CISSP, CISM, CISA, CRISC, etc)
• Bachelor’s degree in security, computer science, information technology, or a related field (or equivalent experience)
• Willingness to work flexible hours, including on-call responsibilities
• Project Management: Strong project management skills, including planning, execution, monitoring, and control.
• Risk Management: Ability to assess, evaluate, and mitigate security risks.
• Communication: Excellent verbal and written communication skills to articulate complex security concepts to technical and non-technical audiences.
• Leadership: Proven leadership skills to motivate and guide security teams.
• Problem-solving: Strong analytical and problem-solving abilities to identify and address security challenges.

Additional details

• This position is based out of our office in the Belltown neighborhood of Seattle, WA (hybrid work schedule).
• The estimated compensation for this position is $105,000.00 - $120,000.00 per year, based on experience and qualifications. In addition, this position is eligible for an annual bonus and an equity grant.

Benefits / Perks

• Full Medical, Vision and Dental coverage
• Flexible vacation policy
• Hybrid in-office/work from home schedule

In the Seattle office:

• Awesome location in Belltown
• Casual dress code
• Standing desk options
• Monthly company-sponsored happy hours