Cyber Security Manager

Summary

Join Encoura as a highly technical Cyber Security Manager and become a key member of a small, skilled team. You will maintain SOC2 and TX-RAMP compliance, enhance security strategy, and provide technical leadership. Collaborate with engineering and product teams on security solutions, data privacy, and risk management. Lead compliance efforts, improve security posture, and manage security infrastructure. Respond to security incidents, collaborate with vendors, and maintain security awareness training. This role offers opportunities for professional growth and development within a mission-driven culture.

Requirements

• AWS Security Architect certification
• Strong analytical and leadership skills
• Excellent communicator (written, verbal and presentations)
• Ability to collaborate with technical and business teams
• Experience securing large scale internet-facing AWS-based products and services (Kubernetes, compute, database, storage, and network technologies)
• Experience in attaining and maintaining a Soc 2 Type 2 certification
• Experience in attaining and maintaining a TX-RAMP certification
• 5+ years of experience in Information Security working in cloud-based environments
• BS in Computer Science, Software Engineering or equivalent, or a Bachelor’s in an unrelated field with at least 5 years of relevant work experience

Responsibilities

• Serve as a technical advisor and leader for Cyber Security solutions
• Lead the efforts around compliance with SOC 2, CCPA, and other regulations
• Enhance security posture and risk-mitigation strategy
• Solve business needs with short-term deliverables, while constantly improving and moving towards long-term architectural goals
• Generate new ideas, and the path to get there
• Lead on security-related incident response, concerns, and alerts
• Manage the security infrastructure and tactical execution / delivery of security deliverables
• Collaborate with engineering teams to ensure that software development, processes and outputs are aligned with compliance-related audit requirements
• Enhance data storage security/ data loss prevention
• Perform annual risk assessment of the company’s technology and related processes
• Align technology and data protection strategy against the NIST 800.53 framework
• Triage incidents and identify/connect the right teams to develop and manage responses
• Maintain, train, and communicate our Cyber Security policies to ensure corporate requirements are met and best practices are implemented
• Collaborate with sales and contract management to respond to customer inquiries, RFP/RFI security questionnaires, and review contract terms. Document commitments and any other security-related obligations made by Encoura to customers
• Coordinate with 3rd party vendors to review platforms for compliance with security controls
• Continuously update and manage our security awareness training program for all employees, contractors and approved system users; and establish metrics to measure the effectiveness of this program
• Monitor the external environment for emerging threats and advise relevant stakeholders on the appropriate course of action

Preferred Qualifications

• Additional Professional level AWS certifications
• Be proactive in keeping your and your teams' skills fresh
• CISSP, CISM, CCSP, CISA certifications
• Relevant Master's degree

Benefits

• Comprehensive health and benefits package
• 401k company match that vestsimmediately upon participation
• Paid holidays and a generous PTO policy
• Paid parental leave