Senior Manager of Information Security and IT at ARCOS

About this role

The Senior Manager, Information Security and IT at Arcos leads the company's security, compliance and corporate IT functions. ARCOS software supports mission-critical operations for utilities and airlines, and our customers expect us to meet a high security bar and to demonstrate it. This role owns that work: SOC 2 compliance across the Arcos product suite, the security program, vulnerability management, security incident response, customer security reviews and corporate IT. This is a hands-on leadership role. The Senior Manager sets direction and priorities, and also works directly in the details: preparing and running audits with the auditors, reviewing and prioritizing findings, leading incident response, and answering customer security questions. The ideal candidate is equally comfortable presenting security posture to executives and digging into a control gap or an alert with the team. ABOUT ARCOS ENGINEERING The Arcos engineering organization builds cloud-native solutions while also maintaining, enhancing, and modernizing legacy systems to improve performance, scalability, and resilience. We design stateless, containerized, and dynamically scalable services, leveraging CI/CD pipelines, Infrastructure as Code, and explicit dependency management to ensure seamless deployments and a high-velocity development experience. We work to evolve legacy systems, refactoring monolithic architectures, improving efficiency, and integrating cloud-native principles where possible. By blending innovation with transformation, we provide end-to-end software solutions that support both new initiatives and mission-critical applications. Requirements Desired Education, Skills & Experience
Bachelor's degree in computer science, information systems, or a related field (or equivalent work experience).
10+ years of experience in information security, including 4+ years leading a security or compliance program at a SaaS company.
Proven experience owning SOC 2 Type II audits end to end, including working directly with auditors and driving remediation across multiple teams.
Hands-on experience with vulnerability management, penetration testing and security incident response.
Solid understanding of AWS security controls and services, and the ability to set security requirements for and partner with cloud operations teams.
Working knowledge of security frameworks such as NIST CSF, NIST 800-53 or ISO 27001.
3+ years of people management experience, including hiring and developing staff and managing contractors.
Strong written and verbal communication skills, with the ability to explain risk clearly to executives, customers and engineers.
Technical Skills Required
SOC 2 Type II compliance and audit management
Vulnerability scanning and penetration test management
SIEM and endpoint detection and response (EDR) tools
AWS security services (IAM, GuardDuty, Inspector, WAF)
Microsoft Entra ID and Microsoft 365 administration
Security policy and risk management
Desired
Compliance automation platforms (Vanta or equivalent)
Experience supporting customers in regulated industries such as utilities or aviation
Application security: SAST/DAST, secure code review, threat modeling
Privacy regulations (GDPR, CCPA, PIPEDA)
Certifications such as CISSP, CISM, CISA or CCSP
Benefits
Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA)
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (Vacation, Sick & Public Holidays)
Family Leave (Maternity, Paternity)
Short Term & Long Term Disability
Training & Development
Work From Home
Wellness Resources
Originally posted on Himalayas