[Hiring] Information Security Manager @Wisconsin Foundation and Alumni Association

Role Description

The Information Security Manager is responsible for leading and continuously improving the security posture, day-to-day operations, security engineering, incident response, vulnerability management, and governance, risk, and compliance (GRC) functions, and executing the organization’s strategic direction. This role is also highly focused on operational excellence, a security-first culture, and a strong mandate to drive automation and AI adoption across security operations.

• Provides direct people leadership and technical oversight across the security program.
• Recommends and sets standards and metrics to ensure a resilient and proactive security posture.
• Partners closely with the Sr. Managing Director, Infrastructure & Security, Infrastructure & Security team members, and other stakeholders.
• Translates organizational priorities into actionable security roadmaps.
• Ensures consistent operational excellence across all security functions.
• Develops the engineers and administrators within the team.

Please note: We are open to hiring for this position to work remotely, with periodic travel to Madison expected throughout the year. Remote candidates must reside in one of the following states to be considered: Arizona, Colorado, Illinois, Iowa, Minnesota, New Mexico, New York, Texas, or Wisconsin.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or relevant experience that provides equivalent knowledge, skills, or abilities.
• 7+ years of progressive experience in cybersecurity, security engineering, or a related field.
• 3+ years of experience directly managing or leading technical security teams, including hiring, performance management, and staff development.
• 5+ years of hands-on experience with enterprise security tools and technologies, including SIEM, EDR, IDS/IPS, firewalls, and endpoint protection platforms.
• 5+ years of experience with security architecture, incident response, vulnerability management, and compliance programs.
• Experience managing relationships with Managed Detection & Response (MDR) providers, security vendors, and other third-party security partners.
• Demonstrated experience leading cross-functional security projects using established project management methodologies.
• Demonstrated success driving security process improvements, automation, or operational optimization initiatives.
• Familiarity with regulatory frameworks and compliance standards including HIPAA, PCI-DSS, and NIST.
• Deep understanding of cybersecurity principles, protocols, architecture, and best practices.
• Proven ability to lead, motivate, and develop technical security teams.
• Strong understanding of regulatory frameworks, compliance standards, and enterprise risk.
• Excellent analytical, problem-solving, and decision-making skills, with the ability to prioritize competing demands.
• Ability to work under pressure and manage multiple complex initiatives simultaneously.
• Strong communication, interpersonal, and stakeholder management skills, including the ability to present to senior leadership.
• Ability to design, document, and maintain effective procedures, processes, and automations.
• Capable of maintaining a high degree of confidentiality and responsibility regarding information related to WFAA and any affiliate organizations.
• Energetic, motivated, service-oriented, and able to effectively manage multiple competing priorities.
• Flexible to new situations and challenges, and an advocate for change.
• Experience implementing or managing AI-enabled security operations, security automation frameworks, or SOAR platforms.
• Ability to lead cross-functional projects using lightweight project management practices.
• Ability to understand business needs and balance usability and security.

Requirements

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM).
• Strong analytical and reporting skills with experience building dashboards and using service data to drive prioritization, root-cause analysis, and continuous improvement.

Benefits

• Competitive pay.
• Outstanding benefits program, including a generous 10% 401k contribution after just one year of service.