Sr. Manager, Information Security
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 8+ years of information security experience.
- 3-5+ years of management or leadership experience.
- Hands-on experience with ISO 27001 implementation, certification, and audits.
- Experience with ISO 28000/28001, C-TPAT, or supply chain security programs.
- Experience in incident response, vulnerability management, risk management, and compliance.
- Experience supporting global manufacturing, logistics, or technology environments preferred.
- ISO 27001 Lead Implementer.
- ISO 27001 Lead Auditor.
Full description
Job Req ID: 30515
About Supermicro:
Supermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are amongst the fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer many new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us to drive accelerated growth and technology-led innovation in the global marketplace.
Job Summary:
The Senior Manager, Information Security Operations is responsible for leading the organization's Information Security Management System (ISMS), security operations, governance, risk management, compliance, incident response, and supply chain security programs. This role provides strategic and operational leadership to ensure the confidentiality, integrity, and availability of corporate information assets while maintaining compliance with ISO/IEC 27001, ISO 28000/28001, NIST, regulatory requirements, and customer security obligations.
The position works closely with executive leadership, IT, Legal, Human Resources, Operations, Manufacturing, Supply Chain, and external auditors to drive continuous improvement of the organization's security posture and resilience. Responsibilities commonly include incident response management, audit preparedness, security engineering oversight, security questionnaires, and compliance activities.
Essential Duties and Responsibilities:Information Security Program Management
- Lead and manage the Information Security Operations team.
- Develop and execute the organization's information security strategy and roadmap.
- Establish security policies, standards, procedures, and guidelines.
- Monitor and improve overall security maturity and effectiveness.
- Provide executive reporting and security metrics to senior leadership.
ISO 27001 ISMS Management
- Maintain and continually improve the Information Security Management System (ISMS).
- Manage ISO 27001 certification activities, surveillance audits, and recertification audits.
- Conduct risk assessments and oversee risk treatment plans.
- Ensure compliance with ISO 27001 controls and applicable regulations.
- Coordinate internal audits, management reviews, and corrective action programs.
ISO 28000 / ISO 28001 Supply Chain Security
- Lead implementation and maintenance of supply chain security programs.
- Support ISO 28000/28001 certification and customer security requirements.
- Conduct contract manufacturer and supplier security assessments.