> Markdown version of [/jobs/ext/4639223-manager-it-security](https://www.wearedevelopers.com/jobs/ext/4639223-manager-it-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager, IT Security - **Company:** Promega Corporation - **Location:** Madison, WI, United States - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Software System Penetration Testing, Microsoft Azure, Cloud Computing Security, Cyber Security, Multi-Factor Authentication, Identity and Access Management, IT Management, Intrusion Detection and Prevention, Microsoft Office, Microsoft Software, Anti-Phishing, Software Vulnerability Management, HybridCloud, National Institute of Standards and Technology Cybersecurity Framework, GXP - **Published:** November 8, 2026 - **Apply:** https://www.careerbuilder.com/job-details/manager-it-security-madison-wi--17cb7913-9422-4b08-a172-d29173b048d0 ## About the Role Computer Security, Management of Information Systems/Technology (MIS), Hybrid Cloud, Computer Security, Biology, Environmental Research, Manufacturing Systems, Regulatory Requirements, ISO (International Organization for Standardization), Artificial Intelligence (AI), 1. Bachelor's Degree or proven work experience that ensures you are ready to be successful in this role. 2. 10+ years of experience in information security or IT, including 1 to 3 years of people leadership experience. 3. Demonstrated experience leading security operations and incident response in an enterprise environment. 4. Working knowledge of AI security principles, including securing AI tool use and data, identifying AI-specific attack vectors, and applying AI capabilities to threat detection and remediation. 5. Working knowledge of security frameworks such as NIST CSF, and experience preparing for audits or compliance assessments. 6. Strong understanding of identity and access management, endpoint and cloud security (Microsoft Azure and Microsoft 365 preferred), and vulnerability management practices. 7. Ability to explain security risks clearly to technical and non-technical audiences and influence decisions across the organization. 8. Demonstrated proficiency in digital tools and technology, including Microsoft applications and mobile platforms, with the ability to adapt and leverage emerging technologies, such as artificial intelligence, to improve efficiency, automation, and collaboration., 1. Professional security certification such as CISSP, CISM, or equivalent. 2. Experience in life sciences, manufacturing, or other regulated industries, including GxP environments. 3. Experience with European cybersecurity regulations or global data privacy requirements. PHYSICAL DEMANDS: 1. Ability to participate in an on-call rotation and respond to security incidents outside normal business hours when needed. 2. Ability to remain stationary for several hours at a time. 3. Ability to use a computer/Microsoft Office applications. ## Description 1. Leads, hires, coaches, and develops a team of security professionals, setting clear goals, providing regular feedback, and supporting career growth. 2. Owns the security operations program, including threat monitoring, vulnerability management, and timely remediation of risks across infrastructure, endpoints, cloud, and applications, applying AI capabilities to strengthen threat detection, proactive vulnerability discovery, and remediation. Accountable for remediation follow-through on identified findings, including penetration test results, audit findings, and vulnerability disclosures, with documented ownership and closure dates. 3. Directs incident response activities, maintains incident playbooks, leads post-incident reviews, and ensures lessons learned are applied. 4. Drives adoption of identity and zero trust principles, including access governance, privileged access controls, and multifactor authentication. 5. Maintains alignment with the NIST Cybersecurity Framework and applicable regulatory and certification requirements, including ISO 27001, SOC 2, NIS2, the EU Cyber Resilience Act, and UK Cyber Essentials, and ensures compliance evidence is continuously audit-ready. 6. Partners with IT teams and business leaders to embed secure-by-design practices into projects, vendor selections, and system changes, including environments handling regulated or GxP data. 7. Leads security assessment and governance of AI tools, model connectors, and citizen developer platforms, including risk rating, conditions of use, and ongoing review as capabilities change. Protects the data flowing through these tools while defending against emerging AI-specific attack vectors such as prompt injection, model manipulation, and AI-enabled social engineering. 8. Oversees the security awareness program, including phishing simulations and training, to strengthen a culture of shared responsibility. 9. Manages the security budget, tools, and vendor relationships, and reports on security posture, metrics, and risk to IT leadership. 10. Demonstrates inclusion through their own words and actions and is accountable for a safe workspace. Acts with kindness, curiosity and respect for others. 11. Embracing and being open to incorporating Promega's 6 Emotional & Social Intelligence (ESI) core principles in daily work. 12. Understands and complies with ethical, legal and regulatory requirements applicable to our business.