> Markdown version of [/jobs/ext/2706885-strategic-manager-enterprise-security](https://www.wearedevelopers.com/jobs/ext/2706885-strategic-manager-enterprise-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # strategic Manager, Enterprise Security - **Company:** Turo Hospital - **Location:** San Francisco, CA, United States - **Experience:** Experienced - **Salary:** $184,000.0 - $230,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software System Penetration Testing, Cloud Computing, Cloud Computing Security, Configuration Management, Cyber Security, Information Leak Prevention, Identity and Access Management, Python (Programming Language), Windows PowerShell, Phishing, Zero Trust Network Access, Software Engineering, Scripting, Okta, Containerization, Infrastructure Automation Frameworks, Information Technology, SailPoint, Terraform - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/manager-enterprise-security-turo-com-8553971 ## About the Role * Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience. * 10+ years of experience in enterprise security, focusing on Zero Trust architecture, Advanced Email Security, DLP, Endpoint Security (e.g., Crowdstrike), and Infrastructure as Code/configuration management (e.g., Terraform). * 2+ years of experience managing or leading a team of security engineers, with a demonstrated ability to provide leadership, guidance, and motivation. * Strong knowledge of identity governance frameworks (e.g., Okta, Sailpoint), SaaS security, compliance (SOX/SOC 2), and experience with Incident Response and advanced threat detection methodologies (SOAR tools like Tines preferred). * Proficiency in scripting and automating security processes using Python, PowerShell, or similar languages, with a passion for building tooling from the ground up. * Experience working on cloud infrastructure, especially AWS and its Security services suite, with a solid understanding of containerized environments and familiarity with GitOps flow. * Strong presentation, facilitation, and written/verbal communication skills, with the capability to interface with multiple levels of the organization and serve as an influencer. * Industry certifications such as CISSP, CISM, CEH, or GIAC are a plus. For this role, the target base salary range in San Francisco is $184k-$230k annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role. Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. We encourage you to talk with your recruiter to learn more about the total compensation and benefits available for this role. ## Description Turo is searching for a highly motivated and strategic Manager, Enterprise Security to lead and mentor a team of Security Engineers in securing enterprise systems and data through the definition, execution, and continuous improvement of a comprehensive security framework. This role will focus heavily on advancing the Zero Trust principles across the organization, ensuring the integrity of our systems and protecting against emerging threats. Key areas of focus include Advanced Email Security, Data Loss Prevention (DLP), Insider Threat prevention, Endpoint Security, Identity and Access Governance, Security Awareness Training, Configuration management and Infrastructure as Code, Incident Response (SOAR automation), Regulatory Compliance and SaaS Security Posture. The successful candidate will provide strategic direction and technical leadership for these domains, anticipating and mitigating potential threats and ensuring regulatory compliance., * Provide technical and strategic leadership for the Enterprise Security team, managing, mentoring, and supporting the career development of team members. * Define the strategy and oversee the implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models. * Direct the development and management of Advanced Email Security, Data Loss Prevention (DLP), Insider Threat prevention, and Endpoint Security solutions. * Collaborate with the Identity and Access Governance teams to define policy and ensure secure and efficient access control policies are enforced. * Lead efforts to ensure ongoing compliance with SOX and SOC 2 standards, including performing regular audits and gap assessments. * Direct the delivery of Security Awareness Training programs and security phishing campaigns to educate employees. * Drive the adoption and deployment of Infrastructure as Code to automate security configurations and infrastructure, specifically using Terraform. * Manage and lead Incident Response efforts (including automation playbooks and SOC collaboration) and identify, assess, and mitigate security risks to protect Turo's assets. * Establish a robust SaaS Security Posture and collaborate with cross-functional teams to integrate security into all stages of the Software Development Life Cycle (SDLC). * Lead the annual penetration testing and annual security tabletop exercise. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Highest Paying Tech Companies in Europe](https://www.wearedevelopers.com/magazine/162-highest-paying-tech-companies-in-europe) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How Much Does a Software Engineer Make? Realistic Software Engineering Salaries](https://www.wearedevelopers.com/magazine/425-how-much-does-a-software-engineer-make-realistic-software-engineering-salaries) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)