> Markdown version of [/jobs/ext/1990636-senior-manager-information-security](https://www.wearedevelopers.com/jobs/ext/1990636-senior-manager-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Manager Information Security - **Company:** THE MADISON - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $175,000.0 - $190,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Identity and Access Management, Zero Trust Network Access, Software Vulnerability Management, Google Cloud, Cloud Platform System, Information Technology, CIS Benchmarks, Servicenow - **Published:** August 8, 2026 - **Apply:** https://www.jobmonkeyjobs.com/career/27916316/Senior-Manager-Information-Security-New-York-New-York-7416 ## About the Role * 8+ years of related experience * Bachelor's degree, or equivalent combination of education and experience * Undergraduate degree in Computer Science , Engineering , or Management Information Systems * MS in Cybersecurity preferred * 5+ years of experience in Information Security with a focus on governance, risk, and compliance (GRC). * Strong knowledge of regulatory requirements (e.g., SOX, PCI, MPAA Best Practice) and industry frameworks (e.g., NIST, ISO, CIS). * Experience leading audits and compliance assessments across Cloud environments (AWS, Azure, GCP) and On-Prem systems. * Demonstrated experience developing and maintaining security policies, standards, and governance documentation. * Strong understanding of risk management principles and methodologies, with experience performing risk assessments and mitigation planning. * Familiarity with security technologies and tools (e.g., vulnerability management, identity & access management, endpoint protection), and how they tie into compliance reporting. * Experience with compliance and governance platforms is a plus (e.g., ServiceNow GRC, Archer). * Excellent communication and collaboration skills * Ability to build strong relationships with internal and external stakeholders. ## Description The Senior Manager of Information Security will be a key leader in developing and advancing our information security governance, risk, and compliance (GRC) program s and security delivery programs . The Senior Manager of Information Security will be responsible for security compliance, governance frameworks, risk management, and continuous monitoring to ensure MSG maintains a robust security posture aligned with industry best practices and regulatory requirements. Acting as both a GRC SME and a Technical Program Manager, you will establish security policies, manage project portfolios, track key performance indicators, and drive the hands-on delivery of security controls and risk mitigation projects across the enterprise. What will you do? * Act as the primary Program Manager for enterprise-wide security implementations (e.g., IAM rollouts, zero-trust adoption, vulnerability remediation initiatives). Coordinate dependencies across Engineering, IT, Legal, Privacy, and Studio/Business Ops. * Lead the development, documentation, and enforcement of security policies, standards, and control frameworks. (e.g., NIST, CIS, ISO, MPAA Best Practices). * Oversee risk assessments, security reviews, and compliance audits to identify gaps and ensure adherence to regulatory requirements, internal standards, and industry best practices. * Collaborate with legal, privacy, and business stakeholders to interpret regulatory requirements (e.g., GDPR, CCPA, TPN) and ensure their integration into security and operational processes. * Develop and maintain security baselines, control procedures, and governance artifacts to guide Studio technology teams. * Oversee vendor risk management by evaluating and continuously monitoring third-party adherence to security standards and requirements. * Direct the design and implementation of security compliance monitoring tools and dashboards to track posture and maintain audit readiness. * Provide support to the Incident Response team and contribute to post-incident reviews, emphasizing improvements to controls and the implementation of risk mitigation strategies. * Serve as a liaison to internal and external auditors, managing evidence collection and audit response processes. * Develop and deliver security training and awareness programs. * Participate in business continuity and disaster recovery planning to ensure compliance requirements are met. * Drive continuous improvement of governance processes and security controls through proactive gap analysis, stakeholder collaboration, and industry benchmarking. * Prepare executive-level reports and presentations on compliance status, audit results, risk trends, and governance initiatives. * Perform other duties as needed to accomplish the overall Threat Management mission at MSG. * Provide exceptional experiences for our guests, partners, and team members, including by adhering to our appearance and presentation guidelines while on-site. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)