> Markdown version of [/jobs/ext/2117183-senior-information-security-manager](https://www.wearedevelopers.com/jobs/ext/2117183-senior-information-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Manager - **Company:** Fortinet Inc. - **Location:** Sunnyvale, CA, United States - **Experience:** Expert - **Salary:** $166,500.0 - $203,500.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Linux, Information Security Management, Network Security, Microsoft SQL Server, MySQL, PCI Data Security Standards, Security Information and Event Management, Software Vulnerability Management, Information Security Management System, Google Cloud, Information Technology, Fortinet, Vmware - **Published:** August 19, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17996810?backUrl=%2Fcareer%2F17996810%2FSenior-Information-Security-Manager-California-Sunnyvale ## About the Role The successful candidate must be a U.S. citizen, and work onsite at Fortinet's headquarter in Sunnyvale, California., * 7+ years of experience in information security area, with people and project management experience. * Subject matter expert of NIST SP800-53, ISO/IEC 27000 and SOC2 related standards, regulations and guidelines. * Experience of managing FedRAMP or GovRAMP implementation and compliance is highly preferred. * Knowledge and experience working with various information security frameworks (ISO/IEC 27001, NIST 800-53, NIST SP800-161, GovRAMP, FedRAMP, PCI DSS) and regulatory frameworks (SOX, PCI-DSS, HIPAA, GDPR, SOC, etc.) * Strong knowledge of and experience in privacy framework and regulatory compliance requirements (e.g., GDPR, CCPA). * Strong network security knowledge. Thorough understanding of current and emergent trends in information security * Working knowledge of information security control technologies including access control, cryptography, vulnerability management, SIEM/log management, ID/IPS, and penetration test. * Working knowledge and hardening skills on information technologies including Linux, Windows, VMWare, MySQL, MSSQL, etc. * Working knowledge of Cloud platforms, Cloud security (AWS, Azure, GCP) and network security. * Experience and knowledge of Fortinet products and services are preferred. * Strong verbal and written communication skills. Demonstrate ability to work with team members, cross functional and external parties. * Ability to work independently in a fast-paced, dynamic environment. Able to establish priorities and meet deadlines. * Ability to provide continual attention to details. Strong analytical mindset. Able to gather and report data in meaningful format. * Passionate about policies, processes and documentation. Able to translate general standards to practical guidelines suitable for business operations. Educational & Certification Requirements: * Bachelor's degree in computer science, Information Security or related field; * A certification in one or more of the following desirable: + CISSP + CISA, CISM + ISO 27001 Lead-Auditor + VCP + CCSP, Must be authorized to work in the U.S. without sponsorship. ## Description Fortinet looking for a Senior Information Security manager to join the Information Security team in the U.S. This position is responsible for leading the information security team, focusing on information security compliance projects. This role will oversee the design, implementation, operation, and continual improvement of the Information Security Management System (ISMS), coordinate security compliance initiatives across the organization, and serve as the primary liaison with external auditors and regulatory bodies. The position requires a strong understanding of ISO/IEC 27001 and NIST security frameworks, cloud security, risk management, governance, and security operations., * Manage information security team, lead the design, implementation, operation, and continual improvement of the Information Security Management System (ISMS). * Perform gap analysis based on NIST SP800-53 and other compliance framework, create mitigation/action plans. * Determine the applicability and apply the information security and privacy requirements to ISMS policies. * Prepare required documents for supporting various compliance frameworks such as FedRAMP and GovRAMP. * Develop related KPI metrics for performance measurement, and for ensuring continued compliance and improvement. * Create compliance project plans. Manage the implementation. * Conduct risk and privacy impact assessments on business and operation processes. Prepare finding reports. Create and implement risk treatment plans. * Collaborate with operation teams to ensure that appropriate controls are implemented and operated properly. * Participate in and lead the daily security operation, oversee the handling of security alerts and incidents. * Lead vulnerability management activities, monitor remediation progress, and work closely with operations teams to ensure timely patching of identified vulnerabilities. * Manage internal and external audits. Develop audit plans, respond to various audits and review requests. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of) - [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)