Information Security Manager

Role Overview

• PartnerOne is seeking a seasoned Information Security Manager to lead, scale, and mature the organization's security function.
• This is a senior leadership role with a broad scope, encompassing direct team management, executive-level reporting, and full ownership of the company's security strategy and operational programs.
• The Information Security Manager will translate organizational risk appetite into executable programs, build and develop a high-performing security team, and serve as the definitive security authority across the business.
• This individual will influence product, engineering, compliance, and go-to-market decisions — ensuring security is a competitive differentiator and not just an operational requirement.
• Own and drive PartnerOne's multi-year information security strategy, aligning program investments and priorities to business objectives, regulatory obligations, and risk tolerance.
• Develop and present regular security risk reports, program health updates, and strategic recommendations to senior leadership and the Board.
• Define, track, and communicate key security performance indicators and risk metrics, translating technical posture into business-relevant terms for executive audiences.
• Manage the information security budget, including headcount planning, tooling investments, and vendor relationships — ensuring strong ROI and alignment with strategic priorities.
• Serve as PartnerOne's senior internal authority on information security, advising the executive team on risk posture, material threats, and program maturity.

Requirements

• 8+ years of progressive information security experience, including at least 3 years in a leadership or management capacity with direct reports.
• Demonstrated experience owning and maturing a broad security program across multiple disciplines simultaneously.
• Deep familiarity with compliance frameworks, including SOC 1/SOC 2 (SSAE18), PCI-DSS, and relevant data privacy regulations.
• Proven ability to communicate complex security risk clearly and persuasively to executive and Board-level audiences.
• Experience managing security in a SaaS, fintech, or similarly regulated technology environment preferred.
• Relevant certifications (CISSP, CISM, CRISC, or equivalent) strongly preferred.
• Track record of building and developing high-performing security teams in a fast-paced, growth-oriented environment.