Senior Information Security Advisor ensuring business priorities align with information security requirements and fostering a strong security culture. Strategic partner supporting executives in informed decision - making.
About the role
- Information Security Manager leading security operations for Protolabs' digital infrastructure. Overseeing compliance and risk management in a hybrid role based in Maple Plain, MN.
Responsibilities
- Lead global security operations, including SOC oversight, SIEM/SOAR tuning, threat detection, and incident response.
- Serve as incident commander for security events and drive end‑to‑end investigation, containment, and remediation.
- Direct vulnerability management across IT, cloud, and OT environments with SLA‑based remediation.
- Manage endpoint, network, and cloud security technologies (EDR/EPP, DLP, CASB, WAF, segmentation).
- Strengthen plant‑floor and OT security in partnership with manufacturing teams.
- Oversee compliance programs for NIST 800‑53/800‑171, SOX ITGC, PCI DSS, ITAR, and CMMC Level 2.
- Lead readiness assessments, audits, evidence management, and remediation tracking.
- Maintain security policies, standards, and procedures aligned with regulatory and customer requirements.
- Manage third‑party risk assessments and ongoing vendor compliance monitoring.
- Lead security governance and risk assessments; track mitigation and communicate risk posture to leadership.
- Ensure adherence to export control requirements, including ITAR and foreign‑person access controls.
- Manage and mentor a global security operations and compliance team.
- Build multi‑year security roadmaps and budgets aligned to company strategy.
- Collaborate across IT, OT, Engineering, Legal, HR, Finance, and other teams on key initiatives.
- Support security and compliance due diligence for M&A activities.
- Drive global security training and awareness programs, including annual and role‑based training.
Requirements
- Bachelor’s Degree in Information Security, Information Technology, Computer Science, or equivalent experience.
- 10+ years of experience across security operations, incident response, vulnerability management, and GRC.
- Experience in regulated environments including ITAR, SOX, PCI DSS, GDPR, and DoD compliance requirements.
- Strong working knowledge of security frameworks: NIST 800‑53/800‑171, CIS Controls, ISO 27001.
- Experience with cloud security (Azure/AWS), identity security, PAM, segmentation, and DLP.
- Outstanding analytical, communication, and documentation skills.
- Experience managing global security programs across complex hybrid environments.
- Proficiency with SIEM, SOAR, vulnerability management platforms, GRC tools, and identity platforms.
- Certifications such as CISSP, CISM, CCSP, CRISC, CISA, ISO 27001 are preferred.
- Ability to collaborate effectively with technical and non‑technical stakeholders.
- Ability to lead incident response activities and guide teams through high‑pressure situations.
- Ability to travel up to 10% of the time.
Benefits
- Health Insurance: Traditional OR High Deductible plan
- Flexible Spending Accounts
- Health Savings Account (including employer contributions)
- Dental and Vision
- Basic and Supplemental Life Insurance
- Short-Term and Long-Term Disability
- Paid caregiver leave
- You will receive PTO + Holiday Pay + Wellness Hours + Volunteer Hours
- 401k with company match and immediate vest
- Employee Stock Purchase Program with a 15% discount
- And More!
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Security Dispatcher ensuring the safety, security, and welfare at Children's Healthcare of Atlanta. Engaging in emergency communications, coordinating security personnel, and monitoring alarms.
Cybersecurity Manager leading compliance and operational security for classified information systems at Boeing. Overseeing analysis, risk management, and security policy enforcement.
Senior Cybersecurity Engineer at TDCX monitoring and responding to cybersecurity incidents. Collaborating with security teams to ensure compliance and protection of organizational data and systems.
Cybersecurity Engineer advancing security posture with real - time threat monitoring using SIEM tools like Splunk. Managing incident response and vulnerability management lifecycle across networks and applications.
Senior Network Security Engineer focusing on MFA services for Verizon's Global Network & Technology team. Collaborating on technical implementation and providing ongoing operational support.
Director managing strategic stakeholder engagement for cyber security initiatives in Australia. Collaborating across governments and industry to drive national cyber preparedness and awareness.
Information Systems Security Officer ensuring operational security for information systems. Collaborating with ISSM and ISO while managing security operations and compliance.
Cybersecurity Engineer Principal at GDIT leads enterprise initiatives for improving identity and access security. Collaborates with leadership to architect modern IAM solutions per Zero Trust Principles.
Manager role supporting Cybersecurity and Technology Risk Oversight Center of Excellence. Leading regulatory exams and audits while collaborating with cross - functional risk management teams.