> Markdown version of [/jobs/ext/2431070-sr-manager-information-security](https://www.wearedevelopers.com/jobs/ext/2431070-sr-manager-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Manager, Information Security

- **Company:** First Entertainment Credit Union
- **Location:** Los Angeles, CA, United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $170,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cloud Computing Security, Cyber Security, Information Systems, Customer Data Management, Disaster Recovery, Identity and Access Management, IT Management, Intrusion Detection and Prevention, Network Architecture, PCI Data Security Standards, Phishing, Software Vulnerability Management, Cloud Platform System, Cyber Threat Analysis, Information Technology, Patch Management, Cloud Migration, CIS Benchmarks, Vulnerability Analysis
- **Published:** August 6, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=96a27d4152ab283f

## About the Role

* Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, or a related field. A Master's degree preferred but not required.
 * 8+ years of progressive information security, cybersecurity, risk management, or IT governance experience, including 5+ years in a leadership or people management role.
 * Strong knowledge of cybersecurity frameworks, standards, and regulations, including NIST Cybersecurity Framework, NIST 800-53, FFIEC guidance, GLBA, CIS Controls, ISO 27001, and applicable financial services regulatory requirements.
 * Professional certifications such as CISSP, CISM, CRISC, CISA, CGEIT, CCSP, or equivalent preferred but not required.
 * Prior experience within the banking, credit union, financial services, fintech, or other highly regulated industries preferred but not required.
 * Experience conducting enterprise cyber risk assessments, maintaining risk registers, developing risk treatment plans, and integrating cyber risk into enterprise risk management programs.
 * Proficiency in security operations, vulnerability management, threat intelligence, penetration testing, and third-party cybersecurity risk management programs.
 * Strong understanding of identity and access management, privileged access controls, segregation of duties, and security governance best practices.
 * Experience reviewing technology implementations, cloud environments, network architectures, and system designs to identify and mitigate security risks.
 * Experience supporting business continuity, disaster recovery, cyber resilience planning, tabletop exercises, and ransomware preparedness activities.
 * Exceptional written, verbal, and presentation skills, with the ability to effectively communicate across all audience levels.

## Description

First Entertainment Credit Union is looking for a Sr. Manager, Information Security who is responsible for leading the organization's information security program to protect information assets, technology infrastructure, and customer data. This role develops security strategy, oversees cybersecurity operations, governance, risk, and compliance (GRC), ensures regulatory compliance, manages security risks, and partners across the organization to strengthen the overall security posture.

The Sr. Manager will serve as a trusted advisor on cybersecurity strategy, emerging threats, risk exposure, and security investments. They will provide advice on security architecture, technology implementations, cloud adoption, and security requirements for new systems and initiatives. The role maintains and enhances cyber resilience through business continuity planning, disaster recovery management, cyber incident response planning, ransomware preparedness exercises, tabletop testing, and recovery readiness.

This is a full-time hybrid in Hollywood, CA and reports to the VP, Enterprise Risk Management. For candidates in California, the targeted pay range is between $130,000 to $170,000.
Responsibilities

 * Develop, execute, and continuously mature the enterprise Information Security Program, including security strategy, governance frameworks, policies, standards, procedures, roadmaps, and annual planning initiatives.
 * Establish and maintain security governance practices aligned with organizational objectives and provide cybersecurity reporting, metrics, risk insights, and strategic recommendations to executive leadership and the Board.
 * Lead enterprise cyber risk management activities, including risk assessments, cyber risk register ownership, emerging threat analysis, risk treatment planning, and integration with the enterprise risk management framework.
 * Oversee security operations, including security monitoring, incident detection, SOC relationships, incident response coordination, forensic investigations, vulnerability remediation, and post-incident corrective actions.
 * Direct identity and access management (IAM) programs, including least-privilege access controls, privileged access management, user access certifications, and segregation of duties compliance.
 * Lead vulnerability and threat management programs, including vulnerability scanning, pen test, threat intelligence review, risk-based remediation prioritization, and patch management oversight.
 * Oversee third-party cybersecurity risk management, including vendor assessments, SOC report reviews, cloud security evaluations, ongoing risk monitoring, and remediation of control gaps.
 * Ensure compliance with applicable cybersecurity laws, regulations, frameworks, and industry standards, including but not limited to NCUA, FFIEC, GLBA, PCI DSS, NIST, CIS Controls.
 * Lead cybersecurity audits, exams, and regulatory readiness efforts, including regulatory requests, corrective action tracking, policy exception management, risk acceptance processes, and control assessments.
 * Maintain and enhance cyber resilience through business continuity planning, disaster recovery coordination, cyber incident response planning, ransomware preparedness exercises, tabletop testing, and recovery readiness.
 * Develop and promote enterprise security awareness and education programs, including phishing simulations, executive cybersecurity education, and initiatives that foster a security-first culture.
 * Develop and maintain cybersecurity KRIs, KPIs, dashboards, and reporting processes while administering and optimizing Governance, Risk, and Compliance (GRC) platforms and tools.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [How to Write a CV and Interview if You Don't Fully Qualify For The Job](https://www.wearedevelopers.com/magazine/183-how-to-write-a-cv-and-interview-if-you-don-t-fully-qualify-for-the-job)