Description
The Vertex Companies, LLC (VERTEX) is a $180M global consulting firm that integrates strategic advisory, project management, and dispute resolution services for organizations facing complex challenges in a world of risk. We embody our core values of embracing lifelong learning, operating with urgency, maximizing value, and driving collaboration to better outcomes for our clients, colleagues, and communities. Join us if you are looking for a career that offers you a chance to love what you do and deliver meaningful impact.
Vertex is seeking a highly driven and hands-on Information Security Manager to lead and manage the company’s overall Information Security Program. This role requires a strong operator and execution-focused leader who can both strategically execute security initiatives and actively drive implementation across the organization. The ideal candidate is someone who can independently lead initiatives, coordinate across business and IT teams, hold vendors accountable, and ensure security controls are effectively implemented, monitored, and continuously improved. This role will work in collaboration with CTO/CISO, business stakeholders, external vendors, managed security providers, and compliance partners to strengthen the company’s security posture while supporting operational and business objectives.
Lead the day-to-day operation and continuous improvement of the company’s Information Security Program.
Strong hands-on experience implementing and managing enterprise security controls across the Microsoft 365 E5 security ecosystem.
Hands-on experience implementing and managing Data Loss Prevention (DLP), CASB, Zero Trust, Conditional Access Policies, EDR/XDR, Vulnerability management and network security.
Proven experience designing, implementing, and operationalizing Security Information and Event Management (SIEM) platforms, including alert tuning, log correlation, incident investigation, automation, and response workflows.
Partner with IT leadership and business stakeholders to implement and operationalize security controls across systems, applications, endpoints, cloud services, and infrastructure.
Maintain and enforce information security policies, standards, procedures, and guidelines aligned with business and compliance requirements.
Track security risks, vulnerabilities, remediation plans, and mitigation activities across the organization.
Oversee day-to-day security operations, including monitoring, alert management, escalation, and response coordination.
Manage relationships and operational performance of external SOC/MDR providers and security vendors.
Review, tune, and optimize security alerts, detection rules, and monitoring configurations to reduce noise and improve effectiveness.
Lead and coordinate incident response activities, including investigation, containment, remediation, recovery, and post-incident reviews.
Coordinate tabletop exercises and security testing activities.
Lead third party risk management program by conducting security reviews of vendors, SaaS platforms, and technology partners by reviewing SOC reports, security questionnaires, risk findings, and remediation plans.
Lead and support compliance initiatives including SOC 2, GDPR, privacy, and other regulatory/security frameworks.
Coordinate audit readiness activities, evidence collection, remediation tracking, and compliance reporting.
Work cross-functionally to ensure security controls are properly documented, implemented, and operating effectively.
Support security awareness and education initiatives across the organization.
-
Bachelor's degree and 8 years of related experience, a Master's degree and 6 years of related experience, or 11 years of related experience and no degree.
Experience managing or supporting enterprise security programs and day-to-day security operations.
Strong hands on experience with security monitoring, incident response, vulnerability management, and risk management.
Experience working with SOC/SIEM platforms, MDR/SOC providers, and cloud security technologies.
Hands-on experience supporting compliance initiatives such as SOC 2, GDPR, HIPPA, or similar frameworks.
Experience conducting third-party/vendor security risk assessments.
Experience partnering closely with Infrastructure, Cloud, and IT Operations teams to implement security controls.
Hands on Microsoft 365 E5 / Azure security technologies
Security operations and SIEM management
Incident response and investigation
IAM, DLP, CASB, Zero Trust, Cloud Security , Data classification & vulnerability management
Endpoint security and vulnerability management
Cloud and SaaS security
Third party risk management
Strong execution and project-driving capability.
Ability to independently manage priorities and push initiatives to completion.
Strong communication and stakeholder management skills.
Ability to work effectively across technical and non-technical teams.
Strong analytical, organizational, and problem-solving skills.
Comfortable operating in fast-paced and evolving environments.
-
CISSP
-
CISM
-
Security+
-
ISO 27001 Lead Implementer/Auditor
-
GIAC certifications
-
Microsoft Security certifications
At VERTEX, we invest in top talent with a highly competitive total compensation package that rewards performance and supports long-term success. Total compensation includes a base salary and a discretionary variable bonus program, depending on your level. Our comprehensive benefits package offers multiple healthcare and dental plan options, as well as company-paid Life Insurance, Short-Term Disability, and Long-Term Disability coverage—ensuring peace of mind for you and your family.
We offer a 401(k) plan with immediate matching and full vesting, empowering employees to build financial security from day one. Additional benefits include Flexible Spending Accounts, a robust Employee Assistance Program, and a suite of exclusive perks that enhance everyday life.
At The Vertex Companies, our salary ranges are intentionally designed to support meaningful career growth over time. These ranges allow employees to develop, expand their impact, and increase their earnings as they progress within their job level. A new hire’s starting compensation is determined by their experience, geographical location, scope of the role at the time of hire, and Company affordability. Our ranges are structured to reward growth and performance, ensuring there is room for advancement and long-term opportunity.
The salary ranges for this role are as follows:
$109,000 - $299,000 USD annually (Geographical Tier AA - Sample Locations: NY Metro, San Franscisco, San Jose, Seattle)
$101,000 - $276,000 USD annually (Geographical Tier A - Sample Locations: Irvine CA, Middlesex NJ, Tacoma WA, Boston, Alexandria)
$92,000 - $253,000 USD annually (Geographical Tier B - Sample Locations - Baltimore, Chicago, Anchorage, Portland)
$84,000 - $230,000 USD annually (Geographical Tier C - Sample Locations - Atlanta, Charlotte, Cincinnati, Miami)
$80,000 - $219,000 USD annually (Geographical Tier D - Sample Locations - Mississippi, Mobile AL, Bowling Green KY, Tulsa)
Time away matters—so we provide a generous paid time off program, including vacation, sick time, and paid holidays (with prorated options for eligible part-time employees).
At VERTEX, growth never stops. Our signature “Lifetime of Learning” program offers tuition reimbursement and personalized support for employees pursuing advanced education—helping you sharpen your skills and accelerate your career.
Please note that The Vertex Companies employs a fully staffed recruiting team. We do not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Agreement, VERTEX will not consider or agree to payment of any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement, VERTEX explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of VERTEX.
#LI-Remote
