Manager, Enterprise Security
About the role
The Enterprise Security Manager will own the strategy, roadmap, and execution of enterprise security across Abridge's organization. They will build and lead a high-performing team while partnering closely with IT, Legal, Compliance, and People teams to deliver security that scales alongside rapid growth.
Responsibilities
Own Enterprise Security Strategy: Define and drive the vision, roadmap, and execution of Abridge's enterprise security program—spanning identity, endpoint, SaaS, email, and corporate network security—ensuring capabilities scale with the organization.
Build and Lead the Team: Recruit, mentor, and develop a team of enterprise security engineers, setting the technical bar from day one and establishing engineering best practices that attract top talent.
Architect Identity and Access Management: Design, implement, and operate IAM and Zero Trust access controls, including SSO, MFA, authentication protocols, access lifecycle management, and identity governance across cloud and SaaS environments.
Secure the Endpoint Fleet: Own the strategy and tooling for endpoint detection and response (EDR), device management (MDM), and endpoint compliance, ensuring every device connecting to Abridge systems meets security standards.
Drive SaaS and Third-Party Security: Establish and operate programs for SaaS security posture management, shadow IT discovery, vendor security assessments, and third-party risk management to maintain control as the SaaS footprint grows.
Automate and Scale: Build production-grade automation for access reviews, onboarding/offboarding workflows, policy enforcement, and security operations—turning manual processes into reliable, code-driven systems.
Partner Cross-Functionally: Collaborate with IT, People, Legal, and Compliance teams to translate regulatory and business requirements into durable, automated technical controls that don't slow down the organization.
Lead Enterprise AI Security: Define and execute Abridge's strategy for securing corporate AI adoption end-to-end—from establishing governance frameworks and sanctioned tool inventories, to implementing technical controls around data loss prevention, prompt injection risks, and third-party AI vendor assessments—ensuring employees can leverage AI safely and at speed.
Define Build vs. Buy: Evaluate and select enterprise security tooling, making pragmatic build-vs-buy decisions that maximize coverage while minimizing complexity.
Requirements
Depth of Experience: 8+ years in enterprise security, identity security, corporate security, or adjacent security engineering domains, with at least 2+ years in a management or team-lead capacity.
Identity and Access Expertise: Strong hands-on depth in identity and access management, including SSO, OAuth/OIDC, SCIM, authentication protocols, access lifecycle management, and identity governance. You understand how to design and operate Zero Trust security architectures in modern enterprise environments.
Endpoint Security Proficiency: Experience designing and operating endpoint security programs at scale, including EDR, MDM, device compliance, and fleet management across macOS, Windows, and Linux.
Cloud and SaaS Fluency: Deep familiarity with securing cloud-native environments (GCP or AWS) and managing the security posture of a large, evolving SaaS estate. You understand the identity-centric nature of modern enterprise risk.
Engineering Mindset: Strong scripting and automation skills (Python, Go, or similar). You write clean, maintainable code and believe that manual processes are technical debt. Experience with infrastructure-as-code is a plus.
Cross-Functional Leadership: Demonstrated ability to partner with IT, HR, Legal, and Compliance to deliver security outcomes through influence, not mandates. You build tools and processes people actually enjoy using.
Communication and Executive Presence: Exceptional communicator who can translate complex security risks into clear business terms for audiences from engineers to executive leadership.
Pragmatic Execution: You have a bias for action and a knack for navigating ambiguity. You understand how to weigh security risks against business velocity, choosing solutions that empower employees while maintaining a strong security posture.
Bonus points
If you have experience building or scaling an enterprise security function from 0 → 1 at a high-growth startup.
If you have worked in a regulated industry such as healthcare, fintech, or life sciences and understand frameworks like HIPAA, SOC 2, or HITRUST.
If you have experience applying Generative AI to enterprise security operations—whether for automating access reviews, triaging alerts, or scaling security awareness.
If you are energized by enabling a fast-growing business to move quickly and securely, treating security as a platform service rather than a gate.
Qualifications
Master's degree in Computer Science, Information Security, or related field.
CISSP, CISM, or equivalent certification preferred.
Proven track record of successful security program implementation and management.
Experience with identity and access management, endpoint protection, and corporate security architecture.
Strong communication and collaboration skills, with the ability to influence security culture across the organization.
Ability to work independently and manage multiple projects simultaneously.
Skills
Identity and Access Management (IAM)
Zero Trust Architecture
Endpoint Detection and Response (EDR)
Device Management (MDM)
Cloud Security (AWS/GCP)
SaaS Security Posture Management
Vendor Risk Management
Automated Security Operations
Security Architecture and Governance
Regulatory Compliance (HIPAA, SOC 2, HITRUST)
Generative AI for Security Operations
Benefits
Stipend for relocation assistance may be available for candidates relocating from outside of the San Francisco Bay Area.
Flexible work schedule with a minimum of 3 days per week in the San Francisco office.
Competitive compensation range: $218K - $256K.
Health insurance plans including medical, dental, and vision coverage.
Generous time off, including 14 paid holidays, flexible PTO, and accrued time off.
Accommodations for individuals with disabilities are available upon request.
Equal opportunity employer.