Senior Manager of Information Security and IT

The Senior Manager, Information Security and IT at Arcos leads the company's security, compliance and corporate IT functions. ARCOS software supports mission-critical operations for utilities and airlines, and our customers expect us to meet a high security bar and to demonstrate it.

This role owns that work

SOC 2 compliance across the Arcos product suite, the security program, vulnerability management, security incident response, customer security reviews and corporate IT.

This is a hands-on leadership role. The Senior Manager sets direction and priorities, and also works directly in the details: preparing and running audits with the auditors, reviewing and prioritizing findings, leading incident response, and answering customer security questions. The ideal candidate is equally comfortable presenting security posture to executives and digging into a control gap or an alert with the team.

ABOUT ARCOS

ENGINEERING

The Arcos engineering organization builds cloud-native solutions while also maintaining, enhancing, and modernizing legacy systems to improve performance, scalability, and resilience. We design stateless, containerized, and dynamically scalable services, leveraging CI/CD pipelines, Infrastructure as Code, and explicit dependency management to ensure seamless deployments and a high-velocity development experience.

We work to evolve legacy systems, refactoring monolithic architectures, improving efficiency, and integrating cloud-native principles where possible. By blending innovation with transformation, we provide end-to-end software solutions that support both new initiatives and mission-critical applications.

Requirements

Desired Education, Skills & Experience

-------------------------------------------

• Bachelor's degree in computer science, information systems, or a related field (or equivalent work experience).
• 10+ years of experience in information security, including 4+ years leading a security or compliance program at a SaaS company.
• Proven experience owning SOC 2 Type II audits end to end, including working directly with auditors and driving remediation across multiple teams.
• Hands-on experience with vulnerability management, penetration testing and security incident response.
• Solid understanding of AWS security controls and services, and the ability to set security requirements for and partner with cloud operations teams.
• Working knowledge of security frameworks such as NIST CSF, NIST 800-53 or ISO 27001.
• 3+ years of people management experience, including hiring and developing staff and managing contractors.
• Strong written and verbal communication skills, with the ability to explain risk clearly to executives, customers and engineers.

Technical Skills

--------------------

Required

• SOC 2 Type II compliance and audit management
• Vulnerability scanning and penetration test management
• SIEM and endpoint detection and response (EDR) tools
• AWS security services (IAM, GuardDuty, Inspector, WAF)
• Microsoft Entra ID and Microsoft 365 administration
• Security policy and risk management

Desired

• Compliance automation platforms (Vanta or equivalent)
• Experience supporting customers in regulated industries such as utilities or aviation
• Application security: SAST/DAST, secure code review, threat modeling
• Privacy regulations (GDPR, CCPA, PIPEDA)
• Certifications such as CISSP, CISM, CISA or CCSP

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Maternity, Paternity)
• Short Term & Long Term Disability
• Training & Development
• Work From Home
• Wellness Resources