Sr Manager InfoSec Engineering

Responsibilities :

• Bring a deep background and broad experience in Information Security, Application Security, & Application Development or related business areas.
• Lead a team of high performing individuals who create remediation plans, perform security reviews, and recommend security solutions to meet current and future needs for HMH products and applications.
• Drive the development and implementation of product and application standard security review processes that result in effective methods for reducing security risks before product releases.
• Demonstrate an ability to influence all project and portfolio stakeholders; communicate relevant security information to both executive leaders and individual contributors in an effective manner.
• Accountable for all aspects of staff management, hiring, coaching, training, performance reviews and recommending pay actions and promotions for the Security Engineering team
• Provide input into the Information Security strategy to ensure that future security investments are aligned appropriately when considering key priorities such as business requirements, industry threat landscape, and risk appetite of HMH.
• Collaborate closely with the Architecture teams
• Demonstrated experience handling the demand / supply of project and program resources and tracking allocation.
• Track policy exceptions and remediation dates through active engagement with development teams and operations teams. Partner with Audit teams to periodically audit controls and secure coding practices being followed by development teams.
• Staying abreast of latest cyber security threats both internal and external
• Oversee projects, program delivery, daily monitoring, response; review of cloud infrastructure, physical infrastructure, and the full life cycle of alerts through incident response; and the threat landscape to ensure ongoing and continued maturity of the organization's security controls in addition to service support
• Drive operational efficiency and excellence leveraging tools, process and automation with appropriate and transparency visibility and metrics that can meet SLAs / SLOs
• Support and implement controls and visibility to meet third party attestations (SOC2, ISO27001, GDPR, SOX)
• Balance being collaborative, open, and approachable while still being firm on security policies and in facilitating progress and compromise

What you should have :

Skills Required

DAST, Application Security, SAST, Application Development, Information Security