Manager, Information Security

About the role

Join Insitu, a Boeing company located in Bingen, WA, as a strategic and hands‑on Manager of Information Security. You will advance the enterprise’s security posture, deliver resilience, and steer cyber risk management across the organization while leading cross‑functional teams and championing a culture that values security and business alignment.

Responsibilities

• Develop and implement an enterprise‑wide information security and cyber strategy aligned with business objectives.
• Identify, assess, and mitigate security risks while ensuring compliance with regulatory and industry standards.
• Oversee information security operations, including threat intelligence, vulnerability management, and incident response.
• Maintain and enforce security frameworks, policies, and regulations such as NIST Cybersecurity Framework, Risk Management Framework (RMF), and CMMC.
• Guide selection, deployment, and ongoing management of security technologies (firewalls, IDS/IPS, endpoint protection, SIEM, IAM, encryption, etc.).
• Translate complex regulatory requirements into technical and operational architectures; collaborate with legal, IT, engineering, and executive leadership.
• Lead and coordinate vulnerability management initiatives: scanning, penetration testing, risk‑based remediation, and patch management oversight.
• Oversee third‑party cybersecurity risk management, including vendor assessments, SOC report analysis, cloud security evaluations, ongoing monitoring, and remediation tracking.
• Maintain organizational security resilience: support business continuity, disaster recovery plans, incident response procedures, and tabletop exercises.
• Lead information security and cybersecurity audits, examinations, and regulatory readiness efforts.
• Supervise, mentor, and develop the Information Security and Cyber team; drive accountability, performance, and professional growth.
• Provide regular status reporting and actionable recommendations to leadership; foster a culture of continuous maturity and measurable improvement.

Requirements

• Bachelor’s degree in information security, cybersecurity, computer science, information systems, or a related discipline.
• 3–5 years of progressive experience in information security, cybersecurity, IT governance, or risk management.
• Hands‑on expertise with common security technologies (e.g., firewalls, SIEM, IDS/IPS, VPNs, NACs, EDR tools, DNS, DLP, IAM).
• Deep knowledge of IT infrastructure (on‑premises and cloud), networking, and emerging technologies.
• Strong interpersonal and communication skills; ability to maintain effective working relationships.
• Experience in highly regulated industries such as defense, aerospace, or government.
• Proficiency in security operations, vulnerability management, threat intelligence, penetration testing, and third‑party risk programs.
• Ability to review and advise on technical architectures (cloud, network, application, endpoint) for security risks.
• Experience supporting business continuity, disaster recovery, ransomware preparedness, and cyber resilience initiatives.
• Exceptional written, verbal, and presentation skills; capable of communicating technical concepts to all audiences.
• Knowledge of security governance best practices.

Preferred Qualifications

• Experience leading people or teams.
• Professional certifications such as CISSP, CISM, CISA, GIAC, or equivalent.
• Familiarity with security frameworks such as CMMC and RMF.
• Experience with security audits, regulatory reviews, and incident management.

Work Arrangement

This position is eligible for hybrid work, with a strong preference for on‑site presence three days per week to maximize collaboration and connection to the team and product. Flexibility in on‑site frequency may be considered based on candidate location, experience, and qualifications.

Benefits

• Competitive base pay and variable compensation opportunities.
• Health insurance options, flexible spending accounts, and health savings accounts.
• Retirement savings plans.
• Life and disability programs.
• Paid and unpaid time‑off programs.
• 9/80 work schedule and flexible work model.

Pay

Typical hiring range: $133,000 – $182,600, based on candidate experience, qualifications, and work location.