> Markdown version of [/jobs/ext/1323396-senior-it-security-manager-i](https://www.wearedevelopers.com/jobs/ext/1323396-senior-it-security-manager-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Security Manager I - **Company:** Goformz, Inc. - **Location:** San Diego, CA, United States - **Experience:** Expert - **Salary:** $140,000.0 - $170,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Software as a Service, Cloud Computing, CompTIA Security+, Cyber Security, System Configuration, Multi-Factor Authentication, Identity and Access Management, Information Security Management, Information Technology Operations, Virtual Private Networks (VPN), Network Architecture, PCI Data Security Standards, Phishing, Zero Trust Network Access, Runbook, Security Information and Event Management, Wireless Access Point, Cloud Platform System, Firewalls (Computer Science), Microsoft InTune, Casper Suite, Gsuite, CIS Benchmarks, Vulnerability Analysis - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e0e9f018b950ab8b ## About the Role * 7+ years of progressive IT and cybersecurity experience, with at least 3 years in a senior or lead security role * Demonstrated experience managing security programs end-to-end in a resource-constrained environment * Hands-on experience with security tools: EDR, SIEM, vulnerability scanners, email security gateways, payment fraud systems, and identity platforms * Working knowledge of one or more compliance frameworks (SOC 2, NIST, ISO 27001, etc.) * Strong incident response skills - you've handled real events, not just tabletops * Prior involvement in security audits, penetration tests, or regulatory reviews * Experience administering Microsoft 365 or Google Workspace and cloud environments (AWS, Azure, or GCP) * Experience managing security and compliance planforms, such as Drata * Excellent written and verbal communication; able to present risk to non-technical leadership clearly Preferred * Relevant certifications: CISSP, CISM, Security+, CEH, GCIA, GCIH, or equivalent * Experience at a company with 50-500 employees; comfortable being the primary security resource * Familiarity with zero trust architecture principles * Experience managing or mentoring junior IT/security staffPhysical Requirements: * Prolonged periods of sitting at a desk and working on a computer. * Must be able to lift up to 25 pounds at times. ## Description We are looking for a hands-on Senior IT Security Manager to own our cybersecurity posture while providing tactical IT operations support. This is a senior individual contributor role with potential team leadership responsibilities as the organization grows. The right candidate thrives in a small-team environment, is comfortable wearing multiple hats, and brings deep security expertise alongside solid IT fundamentals. Approximately 75% of this role is focused on cybersecurity - strategy, implementation, monitoring, and compliance. The remaining 25% covers core IT support and systems administration to keep the organization running smoothly., * Own and continuously mature the organization's information security program, policies, and roadmap * Develop, implement, and enforce security policies, standards, and procedures aligned with industry frameworks (NIST CSF, ISO 27001, CIS Controls, or equivalent) * Conduct regular risk assessments and maintain a risk register; prioritize remediation based on business impact Threat Detection & Incident Response * Monitor, triage, and respond to security events and alerts across endpoints, network, cloud, and SaaS environments * Own the incident response plan; lead investigation, containment, and post-incident review for security events * Manage vulnerability scanning programs and drive timely remediation with internal stakeholders Security Architecture & Engineering * Evaluate, deploy, and manage security tooling (EDR, SIEM, MFA/SSO, email security, DLP, firewall, VPN, etc.) * Provide security guidance on cloud infrastructure (Azure/GCP), SaaS adoption, and new technology onboarding * Oversee identity and access management (IAM) including provisioning, deprovisioning, and least-privilege enforcement Compliance & Third-Party Risk * Lead and support compliance efforts for applicable frameworks or regulations (SOC 2, HIPAA, PCI-DSS, CMMC, GDPR, etc.) * Manage the vendor security review process and maintain third-party risk inventory * Coordinate with external auditors, penetration testers, and security consultants Security Awareness * Develop and run the organization's security awareness training program * Conduct phishing simulations and track outcomes; deliver targeted education where needed * Act as a security advocate internally - advising leadership and employees on security best practices, * Serve as escalation point for complex IT support issues across hardware, software, and connectivity * Administer core systems: Microsoft 365 / Google Workspace, Active Directory / Entra ID, MDM (Intune, Jamf, or similar) * Manage software vendor relationships * Manage user lifecycle (onboarding/offboarding), device provisioning, and access reviews * Maintain IT asset inventory and ensure systems remain patched and up to date * Support network infrastructure including firewalls, switches, and wireless access points * Document IT processes, runbooks, and system configurations ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume)