Manager, IT Security and Compliance
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). But we can use other headings? The instruction says use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It suggests those are examples but we can use other headings? Probably we should stick to those headings where applicable. However the posting has sections like "Who We Are", "Why Authentic", etc. Those are not in the list but we could still use for them? The instruction: "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It implies we should use h3 for any section heading, and those are examples. So we can use h3 for any section heading we include.
We must not include boilerplate like Fraud Alert, EEO, etc. Remove those.
We need to preserve all substantive information.
We need to output only HTML fragment, no html/body tags, no markdown fences.
We need to use - for any list of duties/requirements/benefits, and
for prose.
We need to decide which sections to include: About the role? Could be "Who We Are" and "Why Authentic" maybe combined as About the role? But we have "Position Overview". Could treat "Position Overview" as About the role. The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content to those headings where appropriate.
Thus:
- About the role: could include "Who We Are", "Why Authentic", "Position Justification", "Position Overview". But we need to avoid too thin sections. Maybe combine into About the role.
- Responsibilities: "What You’ll Do" list.
- Requirements: "What You Bring" (mandatory) list.
- Qualifications: maybe "Nice to Have" could be Qualifications? Actually Qualifications often includes required and preferred. But we have separate Nice to Have. Could treat "What You Bring" as Requirements (mandatory) and "Nice to Have" as Qualifications (preferred). Or we could have Skills section for technical skills.
- Benefits: not given besides salary range. Salary range is given under "Primary Location Salary Range:$140,000 - $150,000". So we can have Pay section with that.
- Schedule: not given.
- Benefits: not given besides maybe none.
Thus we will output sections: About the role, Responsibilities, Requirements, Qualifications, Pay.
We must not create sections with filler like "not specified". So we omit Benefits, Schedule.
Now we need to extract content.
About the role: combine Who We Are, Why Authentic, Position Justification, Position Overview. Need to preserve all substantive information, not invent or summarize away detail. But we can combine paragraphs; we must not lose info. We'll produce a few paragraphs (
) containing the combined info.
We need to be careful not to include boilerplate like "For more information, visit corporate.authentic.com. Follow Authentic on LinkedIn, Instagram and WeChat." That's part of Who We Are but maybe considered boilerplate? It's not navigation/legal/EEO etc. It's informational about the company; we should keep it? It's not strictly required but it's substantive about the company. I'd keep it.
Position Justification paragraph(s) we keep.
Position Overview paragraph(s) we keep.
Now Responsibilities: list from "What You’ll Do". Each bullet starts with a verb. We'll put each as
- .
Requirements: from "What You Bring" (mandatory). List each bullet.
Qualifications: from "Nice to Have". List each bullet.
Pay: from "Primary Location Salary Range:$140,000 - $150,000". We'll put as
maybe.
We must not include "Primary Location" text if not given; we have salary range only. We'll just output the salary.
Now ensure we remove Fraud Alert, EEO, etc.
Let's craft HTML.
Start with
About the role
then paragraphs.
We need to preserve line breaks? Use for each paragraph.
We'll combine multiple source paragraphs into maybe multiple
elements.
Let's draft:
Authentic Brands Group (Authentic) is a global brand and entertainment platform that owns and invests in iconic intellectual property and cultural assets. It accelerates brands through a set of specialized businesses that combine powerful storytelling, premium content, unforgettable live experiences and global commerce. Through a network of more than 1,700 best-in-class licensees and strategic partners across 150 countries and expansive distribution, Authentic’s brands drive more than $38 billion in annual systemwide retail sales worldwide. Authentic’s diversified portfolio spans more than 50 brands and reaches nearly one billion social media followers. Its roster includes Reebok, Champion, Shaquille O’Neal, David Beckham, Kevin Hart, Sports Illustrated, Elvis Presley, Muhammad Ali, Marilyn Monroe, GUESS, Aéropostale, Nautica, Eddie Bauer, Lucky Brand, Nine West, Brooks Brothers, Juicy Couture, Vince Camuto, Izod, Van Heusen, Dockers, Ted Baker, Hart Schaffner Marx, Vince, Barneys New York, Judith Leiber, Quiksilver, Spyder, Billabong, Volcom, Roxy, RVCA, DC Shoes, Prince, Sperry and Hunter. For more information, visit corporate.authentic.com. Follow Authentic on LinkedIn, Instagram and WeChat.
Why Authentic: You’ll be able to access the resources and scale, while leveraging innovative technology and nimble environment. What we’re saying is, this isn’t your average day job. If you’re hungry to drive ideas into action and own your career, let’s chat. Our team is rapidly innovating to evolve and define the future of our brands. With the help of some of the brightest minds in retail, marketing, licensing, legal and more, we are building the intersection of digital and experiential marketing to help achieve that mission. We reimagine, evolve and transform brands! At Authentic, we foster an inclusive workplace where diversity of thought and expertise drive competitive advantage. Our global teams are built by go-getters who contribute unique perspectives and push the boundaries of creativity and innovation. Headquartered in New York City, Authentic has offices in major metropolitan cities including Los Angeles and Miami, as well as Toronto, Mexico City, London, and Shanghai.
Position Justification: As the organization continues to grow and adopt new technologies, the security and compliance function must scale beyond reactive reviews and ad hoc guidance. Business teams are increasingly relying on SaaS platforms, APIs, cloud services, integrations, automation, and AI-enabled tools to support daily operations. Each of these areas can introduce risk if access, data protection, vendor oversight, logging, configuration, and control requirements are not consistently managed. Establishing a Manager, Security & Compliance role will provide dedicated oversight for security risk management, application and integration reviews, control design, compliance support, and secure technology adoption. This role will help reduce regulatory, audit, operational, and reputational risk by ensuring that security and compliance requirements are built into new initiatives early, documented clearly, and tracked through remediation. The role will also relieve existing teams of one-off security assessments, strengthen accountability across the control environment, and create a scalable function that supports the business while maintaining appropriate governance over sensitive data and critical systems.
Position Overview: We are seeking a Manager, Security & Compliance to help strengthen the organization’s cybersecurity, technology risk, and compliance programs. This role will be responsible for evaluating security risks, designing practical controls, supporting audit and compliance activities, and partnering with business and technology teams to ensure new systems, integrations, and processes are implemented securely. This is a highly visible, cross-functional role suited for someone who can operate effectively in a fast-moving, lean environment. The successful candidate will work directly with application owners, business leaders, IT, legal, and technology teams to translate security and compliance expectations into clear, practical requirements without unnecessarily slowing down the business. This role reports to the Director of Cyber Security & Compliance.
Now Responsibilities:
Responsibilities
- Lead security and compliance reviews for new and existing technologies, including SaaS platforms, applications, APIs, cloud services, integrations, automation tools, and AI-enabled solutions.
- Assess risk across business and technology initiatives, with a focus on data protection, access controls, vendor risk, logging, auditability, and secure configuration.
- Define and implement practical security controls that align with business needs, regulatory expectations, internal policies, and audit requirements.
- Partner with application owners and business stakeholders to identify security and compliance requirements early in the project lifecycle.
- Conduct security and architecture reviews for applications, APIs, integrations, data flows, and third-party platforms.
- Support compliance activities, including evidence collection, control documentation, risk remediation tracking, user access reviews, and audit response.
- Strengthen application and network security posture by contributing to secure design, vulnerability management, control improvements, and remediation planning.
- Review third-party technology solutions and support vendor due diligence from a security and compliance perspective.
- Establish and maintain guardrails for technology use, including acceptable use, data handling, access management, logging, monitoring, and approval standards.
- Support incident response and investigations involving applications, integrations, vendor platforms, data exposure, or control failures.
- Track risks, issues, remediation plans, and control maturity, and provide clear reporting to leadership.
- Help develop lightweight, scalable processes for reviewing and approving new technologies in a growing organization.
- Stay current on emerging threats, compliance expectations, cybersecurity frameworks, and industry best practices.
- Implement and test CI/CD and secure development controls within internally developed applications.
Requirements:
Requirements
- Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field.
- 7+ years of experience in cybersecurity, technology risk, IT audit, compliance, application security, or network security.
- Strong understanding of security and compliance fundamentals, including access management, authentication, authorization, data protection, logging, vulnerability management, and secure configuration.
- Experience reviewing applications, APIs, SaaS platforms, cloud environments, or integration-heavy technology ecosystems.
- Familiarity with application security concepts, including OWASP risks, secure SDLC practices, API security, and data protection requirements.
- Solid grounding in network security concepts and modern enterprise architectures.
- Experience designing, documenting, or testing security controls in SaaS, cloud, or API-driven environments.
- Ability to perform risk assessments and translate findings into practical, business-friendly recommendations.
- Experience supporting audits, compliance programs, or security governance activities.
- Strong communication skills and the ability to influence decisions across technical and non-techn
for them? The instruction: "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It implies we should use h3 for any section heading, and those are examples. So we can use h3 for any section heading we include.
We must not include boilerplate like Fraud Alert, EEO, etc. Remove those.
We need to preserve all substantive information.
We need to output only HTML fragment, no html/body tags, no markdown fences.
We need to use - for any list of duties/requirements/benefits, and
for prose.
We need to decide which sections to include: About the role? Could be "Who We Are" and "Why Authentic" maybe combined as About the role? But we have "Position Overview". Could treat "Position Overview" as About the role. The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content to those headings where appropriate.
Thus:
- About the role: could include "Who We Are", "Why Authentic", "Position Justification", "Position Overview". But we need to avoid too thin sections. Maybe combine into About the role.
- Responsibilities: "What You’ll Do" list.
- Requirements: "What You Bring" (mandatory) list.
- Qualifications: maybe "Nice to Have" could be Qualifications? Actually Qualifications often includes required and preferred. But we have separate Nice to Have. Could treat "What You Bring" as Requirements (mandatory) and "Nice to Have" as Qualifications (preferred). Or we could have Skills section for technical skills.
- Benefits: not given besides salary range. Salary range is given under "Primary Location Salary Range:$140,000 - $150,000". So we can have Pay section with that.
- Schedule: not given.
- Benefits: not given besides maybe none.
Thus we will output sections: About the role, Responsibilities, Requirements, Qualifications, Pay.
We must not create sections with filler like "not specified". So we omit Benefits, Schedule.
Now we need to extract content.
About the role: combine Who We Are, Why Authentic, Position Justification, Position Overview. Need to preserve all substantive information, not invent or summarize away detail. But we can combine paragraphs; we must not lose info. We'll produce a few paragraphs (
) containing the combined info.
We need to be careful not to include boilerplate like "For more information, visit corporate.authentic.com. Follow Authentic on LinkedIn, Instagram and WeChat." That's part of Who We Are but maybe considered boilerplate? It's not navigation/legal/EEO etc. It's informational about the company; we should keep it? It's not strictly required but it's substantive about the company. I'd keep it.
Position Justification paragraph(s) we keep.
Position Overview paragraph(s) we keep.
Now Responsibilities: list from "What You’ll Do". Each bullet starts with a verb. We'll put each as
- .
Requirements: from "What You Bring" (mandatory). List each bullet.
Qualifications: from "Nice to Have". List each bullet.
Pay: from "Primary Location Salary Range:$140,000 - $150,000". We'll put as
maybe.
We must not include "Primary Location" text if not given; we have salary range only. We'll just output the salary.
Now ensure we remove Fraud Alert, EEO, etc.
Let's craft HTML.
Start with
About the role
then paragraphs.
We need to preserve line breaks? Use for each paragraph.
We'll combine multiple source paragraphs into maybe multiple
elements.
Let's draft:
Authentic Brands Group (Authentic) is a global brand and entertainment platform that owns and invests in iconic intellectual property and cultural assets. It accelerates brands through a set of specialized businesses that combine powerful storytelling, premium content, unforgettable live experiences and global commerce. Through a network of more than 1,700 best-in-class licensees and strategic partners across 150 countries and expansive distribution, Authentic’s brands drive more than $38 billion in annual systemwide retail sales worldwide. Authentic’s diversified portfolio spans more than 50 brands and reaches nearly one billion social media followers. Its roster includes Reebok, Champion, Shaquille O’Neal, David Beckham, Kevin Hart, Sports Illustrated, Elvis Presley, Muhammad Ali, Marilyn Monroe, GUESS, Aéropostale, Nautica, Eddie Bauer, Lucky Brand, Nine West, Brooks Brothers, Juicy Couture, Vince Camuto, Izod, Van Heusen, Dockers, Ted Baker, Hart Schaffner Marx, Vince, Barneys New York, Judith Leiber, Quiksilver, Spyder, Billabong, Volcom, Roxy, RVCA, DC Shoes, Prince, Sperry and Hunter. For more information, visit corporate.authentic.com. Follow Authentic on LinkedIn, Instagram and WeChat.
Why Authentic: You’ll be able to access the resources and scale, while leveraging innovative technology and nimble environment. What we’re saying is, this isn’t your average day job. If you’re hungry to drive ideas into action and own your career, let’s chat. Our team is rapidly innovating to evolve and define the future of our brands. With the help of some of the brightest minds in retail, marketing, licensing, legal and more, we are building the intersection of digital and experiential marketing to help achieve that mission. We reimagine, evolve and transform brands! At Authentic, we foster an inclusive workplace where diversity of thought and expertise drive competitive advantage. Our global teams are built by go-getters who contribute unique perspectives and push the boundaries of creativity and innovation. Headquartered in New York City, Authentic has offices in major metropolitan cities including Los Angeles and Miami, as well as Toronto, Mexico City, London, and Shanghai.
Position Justification: As the organization continues to grow and adopt new technologies, the security and compliance function must scale beyond reactive reviews and ad hoc guidance. Business teams are increasingly relying on SaaS platforms, APIs, cloud services, integrations, automation, and AI-enabled tools to support daily operations. Each of these areas can introduce risk if access, data protection, vendor oversight, logging, configuration, and control requirements are not consistently managed. Establishing a Manager, Security & Compliance role will provide dedicated oversight for security risk management, application and integration reviews, control design, compliance support, and secure technology adoption. This role will help reduce regulatory, audit, operational, and reputational risk by ensuring that security and compliance requirements are built into new initiatives early, documented clearly, and tracked through remediation. The role will also relieve existing teams of one-off security assessments, strengthen accountability across the control environment, and create a scalable function that supports the business while maintaining appropriate governance over sensitive data and critical systems.
Position Overview: We are seeking a Manager, Security & Compliance to help strengthen the organization’s cybersecurity, technology risk, and compliance programs. This role will be responsible for evaluating security risks, designing practical controls, supporting audit and compliance activities, and partnering with business and technology teams to ensure new systems, integrations, and processes are implemented securely. This is a highly visible, cross-functional role suited for someone who can operate effectively in a fast-moving, lean environment. The successful candidate will work directly with application owners, business leaders, IT, legal, and technology teams to translate security and compliance expectations into clear, practical requirements without unnecessarily slowing down the business. This role reports to the Director of Cyber Security & Compliance.
Now Responsibilities:
Responsibilities
- Lead security and compliance reviews for new and existing technologies, including SaaS platforms, applications, APIs, cloud services, integrations, automation tools, and AI-enabled solutions.
- Assess risk across business and technology initiatives, with a focus on data protection, access controls, vendor risk, logging, auditability, and secure configuration.
- Define and implement practical security controls that align with business needs, regulatory expectations, internal policies, and audit requirements.
- Partner with application owners and business stakeholders to identify security and compliance requirements early in the project lifecycle.
- Conduct security and architecture reviews for applications, APIs, integrations, data flows, and third-party platforms.
- Support compliance activities, including evidence collection, control documentation, risk remediation tracking, user access reviews, and audit response.
- Strengthen application and network security posture by contributing to secure design, vulnerability management, control improvements, and remediation planning.
- Review third-party technology solutions and support vendor due diligence from a security and compliance perspective.
- Establish and maintain guardrails for technology use, including acceptable use, data handling, access management, logging, monitoring, and approval standards.
- Support incident response and investigations involving applications, integrations, vendor platforms, data exposure, or control failures.
- Track risks, issues, remediation plans, and control maturity, and provide clear reporting to leadership.
- Help develop lightweight, scalable processes for reviewing and approving new technologies in a growing organization.
- Stay current on emerging threats, compliance expectations, cybersecurity frameworks, and industry best practices.
- Implement and test CI/CD and secure development controls within internally developed applications.
Requirements:
Requirements
- Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field.
- 7+ years of experience in cybersecurity, technology risk, IT audit, compliance, application security, or network security.
- Strong understanding of security and compliance fundamentals, including access management, authentication, authorization, data protection, logging, vulnerability management, and secure configuration.
- Experience reviewing applications, APIs, SaaS platforms, cloud environments, or integration-heavy technology ecosystems.
- Familiarity with application security concepts, including OWASP risks, secure SDLC practices, API security, and data protection requirements.
- Solid grounding in network security concepts and modern enterprise architectures.
- Experience designing, documenting, or testing security controls in SaaS, cloud, or API-driven environments.
- Ability to perform risk assessments and translate findings into practical, business-friendly recommendations.
- Experience supporting audits, compliance programs, or security governance activities.
- Strong communication skills and the ability to influence decisions across technical and non-techn
- for any list of duties/requirements/benefits, and
for prose. We need to decide which sections to include: About the role? Could be "Who We Are" and "Why Authentic" maybe combined as About the role? But we have "Position Overview". Could treat "Position Overview" as About the role. The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content to those headings where appropriate. Thus: - About the role: could include "Who We Are", "Why Authentic", "Position Justification", "Position Overview". But we need to avoid too thin sections. Maybe combine into About the role. - Responsibilities: "What You’ll Do" list. - Requirements: "What You Bring" (mandatory) list. - Qualifications: maybe "Nice to Have" could be Qualifications? Actually Qualifications often includes required and preferred. But we have separate Nice to Have. Could treat "What You Bring" as Requirements (mandatory) and "Nice to Have" as Qualifications (preferred). Or we could have Skills section for technical skills. - Benefits: not given besides salary range. Salary range is given under "Primary Location Salary Range:$140,000 - $150,000". So we can have Pay section with that. - Schedule: not given. - Benefits: not given besides maybe none. Thus we will output sections: About the role, Responsibilities, Requirements, Qualifications, Pay. We must not create sections with filler like "not specified". So we omit Benefits, Schedule. Now we need to extract content. About the role: combine Who We Are, Why Authentic, Position Justification, Position Overview. Need to preserve all substantive information, not invent or summarize away detail. But we can combine paragraphs; we must not lose info. We'll produce a few paragraphs (
) containing the combined info. We need to be careful not to include boilerplate like "For more information, visit corporate.authentic.com. Follow Authentic on LinkedIn, Instagram and WeChat." That's part of Who We Are but maybe considered boilerplate? It's not navigation/legal/EEO etc. It's informational about the company; we should keep it? It's not strictly required but it's substantive about the company. I'd keep it. Position Justification paragraph(s) we keep. Position Overview paragraph(s) we keep. Now Responsibilities: list from "What You’ll Do". Each bullet starts with a verb. We'll put each as
- .
Requirements: from "What You Bring" (mandatory). List each bullet.
Qualifications: from "Nice to Have". List each bullet.
Pay: from "Primary Location Salary Range:$140,000 - $150,000". We'll put as
maybe. We must not include "Primary Location" text if not given; we have salary range only. We'll just output the salary. Now ensure we remove Fraud Alert, EEO, etc. Let's craft HTML. Start with
About the role
then paragraphs. We need to preserve line breaks? Usefor each paragraph. We'll combine multiple source paragraphs into maybe multiple
elements. Let's draft:
Authentic Brands Group (Authentic) is a global brand and entertainment platform that owns and invests in iconic intellectual property and cultural assets. It accelerates brands through a set of specialized businesses that combine powerful storytelling, premium content, unforgettable live experiences and global commerce. Through a network of more than 1,700 best-in-class licensees and strategic partners across 150 countries and expansive distribution, Authentic’s brands drive more than $38 billion in annual systemwide retail sales worldwide. Authentic’s diversified portfolio spans more than 50 brands and reaches nearly one billion social media followers. Its roster includes Reebok, Champion, Shaquille O’Neal, David Beckham, Kevin Hart, Sports Illustrated, Elvis Presley, Muhammad Ali, Marilyn Monroe, GUESS, Aéropostale, Nautica, Eddie Bauer, Lucky Brand, Nine West, Brooks Brothers, Juicy Couture, Vince Camuto, Izod, Van Heusen, Dockers, Ted Baker, Hart Schaffner Marx, Vince, Barneys New York, Judith Leiber, Quiksilver, Spyder, Billabong, Volcom, Roxy, RVCA, DC Shoes, Prince, Sperry and Hunter. For more information, visit corporate.authentic.com. Follow Authentic on LinkedIn, Instagram and WeChat.
Why Authentic: You’ll be able to access the resources and scale, while leveraging innovative technology and nimble environment. What we’re saying is, this isn’t your average day job. If you’re hungry to drive ideas into action and own your career, let’s chat. Our team is rapidly innovating to evolve and define the future of our brands. With the help of some of the brightest minds in retail, marketing, licensing, legal and more, we are building the intersection of digital and experiential marketing to help achieve that mission. We reimagine, evolve and transform brands! At Authentic, we foster an inclusive workplace where diversity of thought and expertise drive competitive advantage. Our global teams are built by go-getters who contribute unique perspectives and push the boundaries of creativity and innovation. Headquartered in New York City, Authentic has offices in major metropolitan cities including Los Angeles and Miami, as well as Toronto, Mexico City, London, and Shanghai.
Position Justification: As the organization continues to grow and adopt new technologies, the security and compliance function must scale beyond reactive reviews and ad hoc guidance. Business teams are increasingly relying on SaaS platforms, APIs, cloud services, integrations, automation, and AI-enabled tools to support daily operations. Each of these areas can introduce risk if access, data protection, vendor oversight, logging, configuration, and control requirements are not consistently managed. Establishing a Manager, Security & Compliance role will provide dedicated oversight for security risk management, application and integration reviews, control design, compliance support, and secure technology adoption. This role will help reduce regulatory, audit, operational, and reputational risk by ensuring that security and compliance requirements are built into new initiatives early, documented clearly, and tracked through remediation. The role will also relieve existing teams of one-off security assessments, strengthen accountability across the control environment, and create a scalable function that supports the business while maintaining appropriate governance over sensitive data and critical systems.
Position Overview: We are seeking a Manager, Security & Compliance to help strengthen the organization’s cybersecurity, technology risk, and compliance programs. This role will be responsible for evaluating security risks, designing practical controls, supporting audit and compliance activities, and partnering with business and technology teams to ensure new systems, integrations, and processes are implemented securely. This is a highly visible, cross-functional role suited for someone who can operate effectively in a fast-moving, lean environment. The successful candidate will work directly with application owners, business leaders, IT, legal, and technology teams to translate security and compliance expectations into clear, practical requirements without unnecessarily slowing down the business. This role reports to the Director of Cyber Security & Compliance.
Now Responsibilities:Responsibilities
- Lead security and compliance reviews for new and existing technologies, including SaaS platforms, applications, APIs, cloud services, integrations, automation tools, and AI-enabled solutions.
- Assess risk across business and technology initiatives, with a focus on data protection, access controls, vendor risk, logging, auditability, and secure configuration.
- Define and implement practical security controls that align with business needs, regulatory expectations, internal policies, and audit requirements.
- Partner with application owners and business stakeholders to identify security and compliance requirements early in the project lifecycle.
- Conduct security and architecture reviews for applications, APIs, integrations, data flows, and third-party platforms.
- Support compliance activities, including evidence collection, control documentation, risk remediation tracking, user access reviews, and audit response.
- Strengthen application and network security posture by contributing to secure design, vulnerability management, control improvements, and remediation planning.
- Review third-party technology solutions and support vendor due diligence from a security and compliance perspective.
- Establish and maintain guardrails for technology use, including acceptable use, data handling, access management, logging, monitoring, and approval standards.
- Support incident response and investigations involving applications, integrations, vendor platforms, data exposure, or control failures.
- Track risks, issues, remediation plans, and control maturity, and provide clear reporting to leadership.
- Help develop lightweight, scalable processes for reviewing and approving new technologies in a growing organization.
- Stay current on emerging threats, compliance expectations, cybersecurity frameworks, and industry best practices.
- Implement and test CI/CD and secure development controls within internally developed applications.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field.
- 7+ years of experience in cybersecurity, technology risk, IT audit, compliance, application security, or network security.
- Strong understanding of security and compliance fundamentals, including access management, authentication, authorization, data protection, logging, vulnerability management, and secure configuration.
- Experience reviewing applications, APIs, SaaS platforms, cloud environments, or integration-heavy technology ecosystems.
- Familiarity with application security concepts, including OWASP risks, secure SDLC practices, API security, and data protection requirements.
- Solid grounding in network security concepts and modern enterprise architectures.
- Experience designing, documenting, or testing security controls in SaaS, cloud, or API-driven environments.
- Ability to perform risk assessments and translate findings into practical, business-friendly recommendations.
- Experience supporting audits, compliance programs, or security governance activities.
- Strong communication skills and the ability to influence decisions across technical and non-techn