Senior Manager, Security & IT Ops

Hazelcast
United States
Workplace: RemoteFull timeFunction: Solutions Engineering & Sales EngineeringEducation: bachelorsSkills: ["Clear communication","Risk judgment","Bringing order","Hands-on ownership","Stakeholder management"]

Own the company’s security direction and internal IT operations, including the security plan, ISMS, risk register, policies, and ongoing compliance improvements. Lead SOC 2 Type II and ISO 27001 work, manage privileged access and critical systems when ownership is unclear, and run security risk assessments. Partner across IT, Cloud SRE, Engineering, Sales, and Legal to improve controls, ensure audit readiness, and support customer assurance and incident readiness.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Hazelcast
Hazelcast
1 hour ago

Senior Manager, Security & IT Ops

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Own the company’s security direction and internal IT operations, including the security plan, ISMS, risk register, policies, and ongoing compliance improvements. Lead SOC 2 Type II and ISO 27001 work, manage privileged access and critical systems when ownership is unclear, and run security risk assessments. Partner across IT, Cloud SRE, Engineering, Sales, and Legal to improve controls, ensure audit readiness, and support customer assurance and incident readiness.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Set the company’s security direction and own the security plan, ISMS, risk register, policies, control ownership, exceptions, and leadership reporting.
  • •Lead audit and compliance execution, serving as the external auditor point of contact and driving SOC 2 Type II and ISO 27001 work from readiness through final reports.
  • •Identify and address security risks via regular risk assessments and coordination with IT, Cloud SRE, and Engineering Operations on practical fixes, including tracking patches and evidence.
  • •Manage privileged and critical access controls, including role-based access, least privilege, separation of duties, and keeping root/administrator/service/shared account records current.
  • •Build dependable internal IT operations and incident readiness: define internal service models, response plans and escalation paths, and review business continuity annually.

Pay and Benefits

Perks:Paid LeaveHealth Insurance401kEapHsa/fsa

Key Requirements

  • •Owned a company-wide security, compliance, internal IT, or technology-risk program in a cloud or software company, influencing leaders and leading a small team or contractors.
  • •Directly led ISO 27001 and SOC 2 Type II work, including external audits, evidence gathering, policy reviews, findings, corrective actions, and control reviews.
  • •Understood privacy and data protection, business-process and vendor risk, vulnerability/patch management, incident response, business continuity, and compliance deadlines.
  • •Comfortable working with identity, business software, AWS, Google Cloud, Azure, Kubernetes, networking, firewalls, VPN/SASE, DNS, logging, monitoring, and privileged access.
  • •Bachelor’s degree in Computer Science, Information Security, Information Systems (or equivalent practical experience), with helpful credentials like CISSP/CISM or ISO 27001 Lead Implementer/Auditor.
Experience:CloudSoftwareSecurity complianceDistributed companySecurity governance
Education:Bachelor's in Computer Science, Information Security, Information Systems
Skills:Clear communicationRisk judgmentBringing orderHands-on ownershipStakeholder management
Certifications:CISSPCISMISO 27001 Lead ImplementerISO 27001 Lead Auditor
Tech Stack:ISMSSOC 2 Type IIISO 27001SecureframeAWSGoogle CloudAzureKubernetesVPN/SASEDNSDomainsLoggingMonitoringIdentityFirewallsPrivileged accessEvidence gatheringVulnerability managementPatch management

Company Brief

Hazelcast
Provides a real-time distributed computing platform combining in-memory data storage and stream processing to power low-latency, mission-critical applications for enterprises across finance, e‑commerce, logistics, and AI/ML use cases.
Industry: Data Infrastructure
Company Size: Medium (51 to 250 employees)
Growth: Scaleup
Funding: Series D
Headquarters: Palo Alto, United States
Founded: 2010
Glassdoor
Glassdoor: 2.5
WebsiteLinkedInGlassdoor