{"id":3994787,"url":"https://alion.io/job/iac-acoustics-information-security-manager","title":"INFORMATION SECURITY MANAGER","company":{"id":2841363,"name":"IAC Acoustics","domain":"iacacoustics.com","url":"https://alion.io/company/iacacoustics","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Agawam, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":155000,"currency":"USD","period":"year","gross":null,"usd_annual":155000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"SentinelOne","optional":false}],"status":"live","first_seen_at":"2026-09-09T02:33:00Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-11-10T00:50:23Z","board_verified":true,"closed_at":null,"days_open":61,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":61},"description":"Department: Technology\nReports to: VP, Technology (David Crandall)\nDirect reports: None initially (program is MSP-backed - Paragus co-managed SOC)\nPrimary location: Boston or Chicago metro preferred; Columbus, OH (Dublin/Kinetics hub), Remote\nTravel: Occasional, across CAG's U.S. sites\nType: Permanent full-time employee\nFLSA status: Exempt\nComp reference: $120,000-$155,000 base + up to 10% bonus\nAbout Catalyst Acoustics Group\nCatalyst Acoustics Group (CAG) is a mid-market manufacturer of noise-control and vibration control products, operating a family of brands (Kinetics Noise Control, Sound Seal, IAC Acoustics, Frasch, Lamvin, Noise Barriers, RealAcoustix, Madrid, CurbTech, and Riverbank Acoustical Laboratories) across roughly a dozen U.S. sites, with the Dublin, OH Kinetics campus as our technology hub. We run a cloud-first Microsoft 365 / Azure environment backed by a managed security provider (Paragus). Security is being established as its own dedicated function within Technology.\nRole summary\nWe are seeking an Information Security Manager - a hands-on player-coach who will both run the security program and do the operational security work. This is the senior owner of CAG's information-security function: you set the roadmap, governance, and reporting, and you also personally respond to incidents, tune the tooling, and work the queue. It is a single-owner role (no direct reports at the outset), leveraging our managed provider (Paragus co-managed SOC) for scale rather than an internal team.\nThis role is the permanent successor to CAG's summer security internship, which concludes in August 2026. It assumes senior ownership of the three functions the intern ran day-to-day - security ticket triage, the KnowBe4 awareness program, and Huntress EDR response - and adds the program governance, risk/compliance, and leadership reporting that a manager owns. A clean handoff package from the intern will be available.\nYou will report to the VP, Technology and partner across IT, HR, Operations, and the brands, plus manage security vendors and the co-managed SOC relationship.\nScope covers IT and information security across CAG’s cloud-first Microsoft 365 / Azure environment; operational-technology (OT) systems on the plant floor are addressed in partnership with Operations.\nEssential functions\nProgram ownership (the “manager” half)\nOwn and drive CAG's information-security roadmap and priorities across all brands and sites.\nDevelop and maintain security policy, standards, and governance; drive toward a defined baseline (e.g., change management, access governance, IR plan approved by the ELT).\nOwn risk and compliance: risk register, control gaps, vulnerability-management program cadence, annual penetration-test coordination, and remediation tracking.\nOwn the security awareness program (KnowBe4): training assignment/completion, monthly phishing-simulation campaigns, targeted remediation with HR, and metrics.\nManage security vendors and tooling - including the Paragus co-managed SOC relationship, EDR, and email security - holding them to scope and outcomes.\nReport to leadership: regular security posture, KPIs, incident summaries, and risk readouts for the VP, Technology and the ELT.\nLead security due diligence and integration for CAG acquisitions - assess acquired environments and fold them into CAG’s security baseline.\nOwn cyber-insurance renewal attestations and respond to customer and contractual security questionnaires and audits.\nOwn or co-own business continuity and disaster-recovery planning, including backup-integrity validation and recovery testing.\nContribute the security lens to the multi-brand ERP consolidation and other major technology projects (access model, segregation of duties, secure design).\nHands-on operations (the “player” half)\nIncident response - lead investigation, containment, and resolution; own the IR runbooks and post-incident reviews; escalate to the VP, Technology as appropriate; available for reasonable after-hours response to high-severity incidents.\nEDR (Huntress) - monitor and triage the alert queue, validate and classify alerts, respond to standard types, tune detections, and drive novel/high-severity cases to closure.\nEmail security (Mimecast) - administer the platform, manage quarantine and policy, and respond to email-borne threats.\nIdentity & M365 security - MFA/Conditional Access, privileged-access and elevated-permission governance, Defender/Entra security posture, and account-compromise response.\nPhishing response - own end-user phishing reports and “is this safe?” triage in Zoho Desk, applying and improving the playbooks.\nVulnerability management - run/coordinate regular scans, prioritize findings, and drive patching/remediation to closure.\nQualifications\nRequired\n5+ years in information security with a mix of hands-on operations and program/leadership responsibility - able to both run the program and do the work directly. (Hands-on technical depth is weighted over policy-only backgrounds, per leadership direction.)\nDirect experience with incident response and EDR tooling (Huntress, Microsoft Defender, CrowdStrike, SentinelOne, or similar).\nMicrosoft 365 / Entra (Azure AD) security depth: MFA/Conditional Access, privileged access, Defender.\nEmail security administration (Mimecast, Proofpoint, or similar).\nVulnerability management and remediation experience.\nExperience owning or heavily contributing to a security awareness program (KnowBe4 or similar).\nAbility to set policy/governance and to report security posture to executive leadership.\nStrong written and verbal communication; can translate risk for non-technical stakeholders.\nAuthorization to work in the United States.\nBachelor’s degree in cybersecurity, information systems, computer science, or a related field, or equivalent experience.\nPreferred\nSecurity certifications (CISSP, CISM, GIAC, or CompTIA Security+/CySA+) are a plus but not required.\nExperience managing a co-managed SOC / MSSP relationship.\nManufacturing or multi-site / multi-entity (incl. post-acquisition) environment.\nFamiliarity with our stack: Huntress, Mimecast, KnowBe4, Microsoft Defender/Entra, Zoho Desk, Intune.\nWhat success looks like (first 6-12 months)\nClean assumption of the three intern-run functions (ticket triage, KnowBe4, Huntress) with a clean transition from the intern’s coverage and interim arrangements in place as needed.\nA published security roadmap and baseline policy set, with an ELT-approved incident-response plan.\nA running cadence: vulnerability scans, awareness campaigns, and a monthly security readout to leadership.\nThe Paragus co-managed SOC relationship actively managed to defined outcomes.\nEEO Statement: The Company is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.","description_format":"text","description_chars":7044,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Sports","HVAC & Refrigeration","Hearing Care & Audiology"],"lifecycle":[{"event":"open","at":"2026-11-10T00:50:23Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.534,"p_room":0.28,"age_days":61,"expected_fill_days":29,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-11-10T02:25:22Z"},"pay":{"stated_usd_annual":155000,"is_top_pay":false},"html_url":"https://alion.io/job/iac-acoustics-information-security-manager","json_url":"https://alion.io/job/iac-acoustics-information-security-manager.json","meta":{"generated_at":"2026-11-10T02:25:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5654,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2841363},"rest":"https://alion.io/mcp/rest/get_company?id=2841363"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiac-acoustics-information-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiac-acoustics-information-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiac-acoustics-information-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iac-acoustics-information-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiac-acoustics-information-security-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3994787}},{"tool":"search_jobs","arguments":{"company":"iacacoustics.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3994787},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}