[Hiring] Senior Manager, Security & IT Ops @Hazelcast

Role Description

We need a hands-on security and internal IT leader who will set direction and step in to do the work. This person will lead company-wide security governance and compliance and make sure employees have reliable, secure technology. The role reports to the executive responsible for all post-sales operations.

This role will manage a small team and may also oversee contractors or outside service providers. Responsibilities include:

• Setting priorities, coaching and developing team members, managing performance, and building the capabilities needed as the function grows.
• Creating practical policies and safeguards, raising important risks, and directly managing identity, privileged access, critical software, and internal systems when no clear owner exists.
• Naming primary and backup owners, making technical and business responsibilities clear, and recommending investments.
• Maintaining formal approval authority for contracts and spending with Finance, Procurement, Legal, and business leaders.
• Primarily an internal role, with customer contact when security expertise is helpful.

Qualifications

• Experience leading across a company.
• Hands-on audit and compliance experience.
• Sound risk and resilience judgment.
• Technical confidence.
• Ability to bring order to unclear work.
• Clear and inclusive communication.
• Education or equivalent experience.
• Helpful credentials and experience.

Requirements

• Set the company's security direction.
• Own the security plan, information security management system (ISMS), risk register, policies, control ownership, exceptions, annual policy updates, leadership reporting, and ongoing improvement of the company's security and regulatory standing.
• Keep audits and compliance work on track.
• Be the main contact for external auditors and lead annual SOC 2 Type II and ISO 27001 work from readiness through final reports.
• Run regular security risk assessments, identify weaknesses in business processes, and work with IT, Cloud SRE, and Engineering Operations on practical fixes.
• Manage access when people join, change roles, or leave.
• Assess new and existing vendors, keep administrator and backup-owner records current, track ownership changes, and rate risk based on the sensitivity of company and customer data.
• Create clear ways for employees to ask for help, set response expectations, document how systems are managed, maintain ownership and transition plans, and track service quality.
• Set clear security and ownership expectations for internal AWS, Google Cloud, Azure, Kubernetes, VPN/SASE, domains, DNS, shared operational channels, logging, and monitoring.
• Maintain clear response plans, escalation paths, communications, exercises, follow-up actions, and alerting practices for security and internal IT incidents.
• Work with Sales and Legal on customer and prospect security or vendor questionnaires.
• Participate as a contributing member of the AI Governance Committee.
• Show meaningful progress in the first year.

Benefits

• Unlimited PTO
• Medical/Dental/Vision Insurance
• HSA/FSA
• Basic & Supplemental Life & AD&D insurance
• Short & Long-term Disability Insurance
• 401k
• EAP (Employee Assistance Program)