Information Security Manager

About the role

Insightful is seeking an Information Security Manager to serve as the primary point of contact for all InfoSec matters. You will ensure the company’s security posture stays strong, compliant, and aligned with business objectives while supporting cross‑functional teams.

Key responsibilities

• Lead InfoSec governance, implement and own compliance controls, and manage SOC 2 Type II and ISO 27001 audit processes.
• Collaborate with Development, DevOps, IT, and Product teams to embed security best practices into solution architectures.
• Work with Legal to ensure compliance with emerging security regulations and address security clauses in customer contracts.
• Support Sales, Customer Success, and Support teams with security questionnaires, audit requests, and customer inquiries.
• Assist the Incident Response team in handling, investigating, and resolving security events.
• Drive continuous improvement of security architecture and monitoring to protect critical assets.
• Provide strategic risk‑management expertise to senior leadership.
• Design and deliver security awareness training for all employees.

Required profile

• 5+ years of experience as an Information or IT Security professional.
• Proven track record of leading a successful SOC 2 Type II or ISO 27001 audit from implementation to certification.
• Strong communication skills with fluent written and verbal English.
• Ability to translate complex security and privacy concepts into clear business terms.

Required skills

• SOC 2 Type II audit experience
• ISO 27001 audit experience
• Security architecture principles
• Modern cloud platforms (GCP, AWS, Azure)
• Incident response processes
• Information security risk management