Information Security Manager

Wage Range: $130,500 - $159,500 USD (Compensation based on experience)

Are you passionate about cybersecurity and ready to make a real impact in a global organization? Colas IS is seeking an experienced Information Security Manager to join our dynamic team. This fully remote role offers the opportunity to lead security initiatives across North America, working closely with both local and global teams to protect our data, systems, and people.

Hiring Timeline

We will stop accepting applications for this role on Sunday, November 23, 2025.

We will begin screening selected applicants the week of November 24, 2025

Applicants selected for an interview with the hiring managr will be contacted for interviews beginning the week of December 01, 2025

• Develop, implement, and maintain our information security strategy, ensuring the confidentiality, integrity, and availability of company data and systems.
• Oversee and enforce security policies, procedures, and standards aligned with the NIST Cybersecurity Framework (CSF).
• Recruit, train, and mentor security team members, and manage relationships with external vendors.
• Adapt global security procedures to meet the needs of North American users and systems.
• Champion North American priorities within the global security team, influencing programs and projects.
• Lead vulnerability management, risk assessments, and incident response planning.
• Coordinate North American IT teams during cybersecurity incidents.
• Prepare and present regular reports on security operations and projects to senior management.
• Ensure compliance with relevant laws, regulations, and frameworks (e.g., CMMC, privacy and AI laws).
• Oversee audits, analyze gaps, design remediation plans, and ensure closure of actions.
• Help define budgets for security operations and monitor expenses.
• Analyze data to propose security improvements for North American systems.

• Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred).
• Minimum 6 years of information security experience, with at least 3 years in a leadership or managerial role.
• At least 2 years of experience working in a matrixed environment within a large organization.
• CISSP, CISM, or equivalent certifications preferred.
• Deep knowledge of security technologies (network, endpoint, email, identity & access management, application, data security).
• Experience with cloud infrastructure security (Azure preferred; OCI, AWS, Google also valued).
• Strong understanding of security frameworks and best practices (NIST CSF, CMMC, ISO 27001).
• Regulatory compliance, risk management, and audit process expertise.
• French language skills are a plus.

• Excellent communication: Able to convey complex security concepts to technical and non-technical audiences.
• Collaborative mindset: Works effectively with cross-functional teams.
• Leadership: Guides and mentors team members, manages vendors, and influences decision-making.
• Adaptability: Embraces change and new technologies.
• Critical thinking and business acumen: Balances cybersecurity strategy with business goals.
• Time management and empathy: Prioritizes tasks and fosters a security-conscious culture.

• Remote work: This position is fully remote within the continental United States.
• Travel: Occasional travel may be required, including international trips.
• Employment requirements: Must be legally authorized to work in the United States. Pre-employment criminal background check and drug screening required.
• Physical requirements: Prolonged computer use, basic hand-eye coordination, and occasional travel.