Manager, Information Security

About the role

At Insitu, located in Bingen, WA, you will lead the development and implementation of an enterprise‑wide information security and cyber strategy that aligns with business objectives. You will guide cross‑functional teams, build relationships across legal, IT, engineering, and executive leadership, and champion a culture that values security while integrating business needs.

Responsibilities

• Develop and implement an enterprise‑wide information security and cyber strategy aligned with business objectives.
• Identify, assess, and mitigate security risks while ensuring compliance with regulatory and industry standards.
• Oversee information security operations, including threat intelligence, vulnerability management, and incident response.
• Maintain and enforce security frameworks, policies, and industry regulations such as NIST Cybersecurity Framework, Risk Management Framework (RMF), and CMMC.
• Guide the selection, deployment, and ongoing management of security technologies, including firewalls, intrusion detection/prevention, endpoint protection, SIEM, identity and access management, and encryption solutions.
• Translate complex regulatory requirements into technical and operational architectures; collaborate effectively with legal, IT, engineering, and executive leadership.
• Lead and coordinate vulnerability management initiatives: scanning, penetration testing, risk‑based remediation, and patch management oversight.
• Oversee third‑party cybersecurity risk management, including vendor assessments, SOC report analysis, cloud security evaluations, ongoing monitoring, and remediation tracking.
• Maintain organizational security resilience: support business continuity and disaster recovery plans, incident response procedures, and tabletop exercises.
• Lead information security and cybersecurity audits, exams, and regulatory readiness efforts.
• Supervise, mentor, and develop the Information Security and Cyber team; drive accountability, performance, and professional growth.
• Provide regular status reporting and actionable recommendations to leadership; foster a culture committed to continuous maturity and measurable improvement.

Requirements

• Bachelor’s degree in information security, cybersecurity, computer science, information systems, or a related discipline.
• 3–5 years of progressive experience in information security, cybersecurity, IT governance, or risk management.
• Hands‑on expertise with common security technologies (e.g., firewalls, SIEM, intrusion detection/prevention systems, VPNs, NACs, EDR tools, DNS, DLP, IAM).
• Deep knowledge of IT infrastructure (on‑premises and cloud), networking, and emerging technologies.
• Strong interpersonal and communication skills with the ability to maintain effective working relationships.
• Experience in highly regulated industries such as defense, aerospace, or government.
• Proficiency in information security operations, vulnerability management, threat intelligence, penetration testing, and third‑party cybersecurity risk management programs.
• Ability to review and advise on technical architectures (cloud, network, application, endpoint) for security risks.
• Experience supporting business continuity, disaster recovery, ransomware preparedness, and cyber resilience initiatives.
• Exceptional written, verbal, and presentation skills; able to communicate technical concepts to all audiences.
• Knowledge of security governance best practices.

Preferred Qualifications

• Experience leading people or teams.
• Professional certifications such as CISSP, CISM, CISA, GIAC, or equivalent.
• Familiarity with security frameworks such as CMMC and RMF.
• Experience with security audits, regulatory reviews, and incident management.

Pay

Typical hiring range: $133,000 – $182,600 (salary based on candidate experience, qualifications, and work location).

Schedule

This position is eligible for hybrid work. The preferred model is on‑site three days per week to maximize collaboration, with flexibility based on candidate location, experience, and qualifications.

Benefits

Insitu offers a Total Rewards package that includes competitive base pay, variable compensation opportunities, health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability programs, and paid/unpaid time off. Specific programs and options vary by eligibility factors such as geographic location and date of hire.