Manager, Information Security

-

1. Strategic Customer Security Ownership (Primary)

• Own end‑to‑end security conversations for strategic customers
• Act as the single-threaded owner across Cloud Ops, DevOps, CPS, Engineering, and Compliance
• Translate customer security standards into implementable, testable, and supportable models
• Ensure consistent positions across decks, calls, audits, and escalations

1. Cloud Infrastructure & Operating Model Alignment

• Own customer discussions around: - VMSS vs VM security equivalence
• Non‑domain‑joined deployments
• Image‑based enforcement, identity lifecycle, drift handling
• Lead definition and validation of: - Patching lifecycle and visibility
• Monitoring and telemetry alignment (MDE, Sentinel, customer tools)
• Support and escalation RACI in customer‑owned subscriptions
• Drive clarity on what Icertis owns vs what the customer owns

1. Deviation, Risk & Exception Management

• Own formal risk narratives for deviations from customer standards

(e.g., domain‑join semantics, tooling assumptions)

• Coordinate executive‑level risk acceptance with customer CSO teams
• Ensure deviations are: - Explicitly documented
• Guard‑railed
• Time‑bound
• Supported by equivalent security outcomes

1. Change Management & Control Governance

• Own structured approaches for: - GPO change management
• Emergency vs planned enforcement
• Impact assessment and rollback logic
• Ensure every change has: - Clear ownership
• Defined timelines
• Evidence and traceability

1. CI/CD, Deployment & Tooling Alignment

• Own customer security posture for: - Git runners / CI‑CD execution models
• Private Link vs DMZ‑based execution
• Network allow‑listing and proxy constraints
• Ensure deployment models remain: - Secure
• Auditable
• Scalable across future releases (not bespoke per customer)

1. Evidence, Visibility & Audit Readiness

• Own the evidence model for strategic customers: - Patch visibility
• Scan outputs (SAST, SCA, VAPT)
• Image lineage and deployment traceability
• Convert ad‑hoc evidence requests into repeatable, system‑driven artifacts
• Support audits without creating parallel operational processes