Archived listing. The details below describe a past opening.
Robert Half is looking for an Information Security Manager for our partner in the Madison, WI area. This role will take ownership of a growing security program and lead a team responsible for keeping the organization’s technology environment secure, resilient, and compliant.
This is a hands-on leadership role for someone who can operate at both the strategic and technical levels. You’ll help shape the security roadmap, lead day-to-day security operations, develop the team, and partner with infrastructure and business leaders to improve the organization’s overall security posture.
What You’ll Do
- Lead and develop a team of security engineers/administrators, including hiring, coaching, performance management, and career development.
- Own the security program across security operations, incident response, vulnerability management, security engineering, and GRC.
- Establish security standards, policies, processes, and metrics and continuously improve how security is managed.
- Lead response to significant security incidents and oversee remediation, root-cause analysis, and post-incident improvements.
- Manage vulnerability remediation, security assessments, penetration testing, audits, and compliance requirements.
- Oversee security technologies including SIEM, EDR, firewalls, IDS/IPS, endpoint protection, and related tools.
- Partner with infrastructure and technology leadership on security architecture, cloud security, access controls, hardening, and risk management.
- Manage relationships with MDR providers and other security vendors, holding partners accountable for service levels and results.
- Identify opportunities to automate security processes using scripting, SOAR, AI, and other emerging technologies.
- Translate business priorities and security risks into a practical roadmap of projects and improvements.
- Communicate security risks, priorities, and recommendations to technical teams and senior leadership.
- Build a security-first culture through awareness, education, and collaboration across the organization.
- 7+ years of cybersecurity, information security, or security engineering experience.
- 3+ years leading or managing technical security professionals.
- Strong hands-on background with enterprise security tools such as SIEM, EDR, firewalls, IDS/IPS, and endpoint security.
- Experience across incident response, vulnerability management, security architecture, and security operations.
- Working knowledge of NIST and other security/compliance frameworks such as HIPAA or PCI-DSS.
- Experience managing security vendors, MDR providers, or other outsourced security services.
- A track record of improving security processes, operations, and efficiency through automation.
- Experience with AI-enabled security tools, SOAR, scripting, or other security automation technologies.
- Strong communication skills and the ability to explain technical security issues and business risk to senior leaders.
- A leadership style focused on developing people, building accountability, and creating a collaborative security culture.
- Ability to balance security requirements with business needs and usability.
Nice to Have
- CISSP, CISM, or similar security certification.
- Experience building or maturing an enterprise security program.
- Experience with security metrics, dashboards, and risk reporting.
- Experience across both cloud and on-premises environments.