Sonoma Consulting Inc. Logo

Sonoma Consulting Inc.

Manager of IT Security

Posted One Month Ago
Be an Early Applicant
In-Office
Elgin, IL, USA
Expert/Leader
In-Office
Elgin, IL, USA
Expert/Leader
Lead development and execution of an enterprise risk-based information security program. Define policies, guide infrastructure and application security, oversee vulnerability testing, support incident response and investigations, collaborate with IT and business teams on secure development and risk inputs for RFPs, and keep leadership informed on security trends.
The summary above was generated by AI
Company Description

Sonoma Consulting provides the highest quality service and support to our clients and consultants. Our clients range from start-ups to Fortune 500 companies.

Job Description

Responsibilities:
•    Provide leadership to define and implement a risk based strategy and program to manage our digital and information assets and then continuously review and set/update policies to support the program.
•    Lead the organization in identifying, developing, implementing and maintaining business and technology processes and systems across the organization to reduce information and information technology risks.
•    Establish appropriate standards and policies, indirectly manage security technologies and direct the establishment and implementation of policies and procedures for recurring and urgent investigations, breaches, and assessments.
•    Participate in key Operations and Systems operating routines to implement and drive information security risk strategy and business processes.
•    Work with Client’s Infrastructure team to ensure our applications are developed, enhanced and maintained according to the security-based best practices and associated security guidelines.
•    Collaborate with Infrastructure, Internal IT, and marketing colleagues to help define and ensure Client -wide consistency of security protocols and risk management.
•    Work with business colleagues to review RFPs, RFIs etc., and provide security and risk-related input into proposals.
•    Monitor information security trends internal and keep leadership informed about information security-related issues and activities potentially affecting the organization.

Qualifications

Requirements:
•    More than 10 years of experience in IT with at least 3 years in a security leadership role in a global organization.
•    Application Life Cycle management and application development experience in the context of a security framework.  
•    Strong subject matter experience in infrastructure & application security, vulnerability testing and development of a risk appetite.  
•    Risk management experience with proven ability to effectively apply risk principles to challenging business situations.
•    Superior business acumen, strategic planning skills and experience with an emphasis on visionary innovation and automation.
•    Demonstrated organizational skills with the ability to identify priorities, drive performance, and execute plans on schedule.
•    Excellent written and verbal communication skills, as well as effective presentation and persuasion capabilities, and management presence that elicits confidence and credibility.
•    Resourceful, flexible, and open to new ways of thinking, with the ability to drive change.
•    BS Degree in related field or equivalent experience
•    Security certifications strongly desired
•    Ability to work nonstandard hours including nights, weekends and holidays
•    Domestic as well as International travel will be required

Additional Information

TItle:Security Manager / Director

keyworkds: Security

Similar Jobs

One Month Ago
In-Office
2 Locations
118K-207K Annually
Expert/Leader
118K-207K Annually
Expert/Leader
Information Technology • Software
Lead modernization of a global Third-Party Risk Management (TPRM) program by shifting from questionnaire-centric assessments to a data-driven model using technical validation, automation, continuous monitoring, and AI. Partner with Procurement, Legal, Privacy, and Supply Chain to standardize contracts and controls, maintain centralized third-party inventories, report risks to senior leadership, and build a high-performing TPRM team while overseeing advanced technical assessments for critical suppliers.
Top Skills: AIAPIsAutomationCcpaCloud PlatformsContinuous MonitoringGdprIdentity And Access Management (Iam)Integration ArchitecturesIso 27001Nist CsfPenetration TestingThreat ModelingVulnerability Assessment
15 Minutes Ago
Remote or Hybrid
USA
195K-290K Annually
Expert/Leader
195K-290K Annually
Expert/Leader
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Own the architecture and multi-year roadmap for CrowdStrike’s global IP and optical backbone. Lead traffic engineering, capacity planning, demand forecasting, hardware and vendor strategy, cloud connectivity, automation, infrastructure-as-code, telemetry, and AI-assisted network operations. Drive initiatives from funding through implementation and operational stewardship, serve as a senior incident escalation resource, influence executive stakeholders and vendor roadmaps, and mentor senior engineers. The role requires large-scale backbone expertise, optical transport knowledge, cloud networking experience, FedRAMP exposure, and U.S. citizenship or Green Card status.
Top Skills: 400G800GAi ModelsAlien WavelengthsAnsibleAristaAWSAzureCdnCerebrasCi/CdCiscoCoherent OpticsContainersCoreweaveDatabasesDdos MitigationDispersion ManagementDwdmEdfaFedrampGCPGitopsInfineraIp/MplsIs-IsJuniperMessage QueuingMp-BgpMpls-TeNokiaOciPe/P ArchitecturesRaman AmplificationRoadmSegment RoutingSr-MplsSrv6Telemetry AnalyticsTerraformVirtualizationVrfs
2 Hours Ago
Remote or Hybrid
USA
100K-155K Annually
Mid level
100K-155K Annually
Mid level
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Assess customers’ Falcon environments, identify security-posture gaps, recommend remediation, and contact customers regarding standards misalignment. Document and resolve issues within SLAs, produce service reports, coordinate troubleshooting with support and internal teams, and promote customer satisfaction. The role requires cybersecurity experience, threat detection and incident response knowledge, operating-system proficiency, strong customer communication, and the ability to use AI technologies to improve workflows and decisions.
Top Skills: Ai TechnologiesCis Critical Security ControlsCloud Controls MatrixCrowdstrike Falcon CompleteIso 27001/2LinuxmacOSMdr/XdrMitre Att&CkNist Cybersecurity FrameworkPci DssSIEMUebaWindows

What you need to know about the Chicago Tech Scene

With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.

Key Facts About Chicago Tech

  • Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
  • Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
  • Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
  • Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account