{"id":177575,"url":"https://alion.io/job/synack-manager-information-security","title":"Manager, Information Security","company":{"id":38833,"name":"Synack","domain":"synack.net","url":"https://alion.io/company/synack","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":64,"open_postings":10,"ghost_share":0.6,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":150000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Datadog","optional":false},{"name":"FedRAMP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 42001","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-08-28T15:54:40Z","employer_posted_date":"2026-08-31","last_verified_at":"2026-10-17T19:40:08Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":49},"description":"Synack’s Penetration Testing as a Service platform manages customers’ attack surfaces by discovering new assets, pentesting for critical vulnerabilities and gaining visibility into the root causes of security risks. We are committed to making the world more secure by harnessing a talented, vetted community of security researchers to deliver continuous penetration testing and vulnerability management, with actionable results. Synack's PTaaS platform has uncovered more than 71,000 exploitable vulnerabilities to date, protecting a growing list of Global 2000 customers and U.S. agencies in a FedRAMP Moderate Authorized environment. For more information, please visit www.synack.com.\nWe are looking for a talented Information Security Compliance Manager with deep expertise in ISO, SOC, CMMC and FedRAMP compliance. You will work closely with the Product, Engineering, and Operations teams to ensure proper security controls and monitoring are applied. Sounds interesting? Keep reading…\n**Please note that due to federal government contract requirements, we can only hire a citizen of the United States into this role.\nHere’s what you'll do\nAutomate generation of System Security Plans (SSP), including Security Concept of Operations, Risk Management Matrix, Security Control Traceability Matrix, and conduct Security Impact Analysis (SIA) on major system changes.\nDevelop and maintain automated Plans of Action and Milestones (POAMs).\nContribute to the adoption and implementation of automation and use of Artificial Intelligence (AI) within Synack's Information Security operations.\nOwn the inventory and risk assessments of AI/agentic systems used across Synack, aligned to NIST AI RMF and ISO 42001, including data handling, model and agent change control, non-human identity and credential scoping.\nBuild and own automated evidence collection and control-drift around security controls.\nCommunicate regularly with stakeholders on security compliance issues aligning to CIS and NIST standards, track mitigation/remediation tasks, and assisting in generation of reports and metrics.\nCodify security controls into IaC guardrails, CNAPP policies, and CI/CD checks to prevent risks at commit and deploy time.\nWorking with Project Managers and Software Engineers in a collaborative and enabling (non-obstructive) manner; Ensuring appropriate information security policies, standards, procedures, and guidelines are being incorporated across Synack hosted services and infrastructure, with a focus on hardening and adhering to DevSecOps principles.\nCoordinate with the field teams to respond to vendor security assessments and conduct 3rd party risk assessments of Synack vendors.\nHere’s what you’ll need\n8+ years of experience IT Security Strategy, Risk Management, IT Audit and Compliance with a Cloud Service Provider\nExperience with Python, Terraform, and CI/CD pipelines, plus comfort integrating tools with AI.\nExperience with Enterprise Governance, Risk Management, and Compliance (GRC) tools.\nExperience with event monitoring and alerting tools such as Datadog, Stackdriver, and Azure Sentinel.\nExperience with SOAR or auto-remediation platforms and detection engineering / SIEM query languages.\nExperience with Cloud Native Application Protection Platforms (CNAPP).\nExperience with leveraging security tools within the Software Development Lifecycle (SDLC).\nFamiliarity with secrets management and workload identity (non-human).\nWorking knowledge of security regulations, standards, and frameworks, including but not limited to ISO27000, ISO42001, OWASP, SOC2, GDPR, CMMC, FedRAMP, and NIST.\nExcellent written and verbal communication skills with the ability to accurately communicate security and risk-related information to technical and non-technical audiences.\nReady to join us?\nSynack is committed to embracing diversity. Our people are our strength. Each addition to our team is an opportunity to grow and diversify our ideas, experiences, and viewpoints. Synack strives to be inclusive of all people. \nAs a candidate, Synack cares about your privacy. Please view our candidate privacy policy.\nThis position has responsibility to ensure Synack’s security and privacy posture is maintained.\n$150,000 - $180,000 Salary is determined by a combination of factors including location, level, relevant experience, and skills. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. The compensation package for this position may also include equity, and benefits.\nFor more details about our benefits, please see our benefits overview. Then for the Employer code, enter: synack","description_format":"text","description_chars":4673,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-08-30T23:18:12Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.381,"p_room":0.45,"age_days":49,"expected_fill_days":29,"reasons":["conf:2","stale_co","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/synack-manager-information-security","json_url":"https://alion.io/job/synack-manager-information-security.json","meta":{"generated_at":"2026-10-17T20:41:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4791,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":38833},"rest":"https://alion.io/mcp/rest/get_company?id=38833"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsynack-manager-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsynack-manager-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsynack-manager-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/synack-manager-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsynack-manager-information-security"}]}