ZipRecruiter

Log In

1

Information Security Management Jobs in California

CBB Bank

INFORMATION SECURITY MANAGER

Los Angeles, CA · On-site

$115 - $117/hr

INFORMATION SECURITY MANAGER Full Time Los Angeles, CA, US 8 days ago Requisition ID: 1096 Salary ... The incumbent also supports effective risk management and helps safeguard the Bank's data and ...

PSFCU Careers

Information Security Analyst

Fairfield, CA · On-site

$44K - $79K/yr

Works with the IT Infrastructure and Security Manager to establish computer system physical and information security standards and procedures, coordinates physical security related matters with ...

Tech-Mex

Information Security

Pleasanton, CA

The Information Security Engineer maintains 24x7 support, responds to vendor security ... audits and manage remediation plans Collaborate with other areas of IT to manage security ...

Tech-mex

Information Security

Pleasanton, CA · On-site

The Information Security Engineer maintains 24x7 support, responds to vendor security ... Collaborate with other areas of IT to manage security vulnerabilities * Conduct research to keep ...

next page

Showing results 1-20

All JobsInformation Security Management JobsInformation Security Management Jobs in California

Information Security Management information

See California salary details

$61.7K

$134.3K

$197.4K

How much do information security management jobs pay per year?

As of Sep 3, 2026, the average yearly pay for information security management in California is $134,322.00, according to ZipRecruiter salary data. Most workers in this role earn between $109,100.00 and $158,400.00 per year, depending on experience, location, and employer.

What is information security management?

Information Security Management refers to the processes and policies put in place to protect an organization's information assets from threats such as unauthorized access, data breaches, and cyberattacks. It involves identifying risks, implementing security controls, and ensuring compliance with relevant regulations and standards. Effective information security management helps organizations safeguard sensitive data, maintain business continuity, and build trust with clients and stakeholders.

What are some common challenges faced by professionals in information security management, and how can they be addressed?

Professionals in Information Security Management often face challenges such as balancing security requirements with business goals, keeping up with evolving cyber threats, and ensuring employee compliance with security policies. To address these, effective communication with stakeholders, ongoing employee training, and regular risk assessments are critical. Additionally, fostering a culture of security awareness and collaborating closely with IT, legal, and business teams can help proactively manage risks and ensure organizational resilience.

What are the key skills and qualifications needed to thrive as an information security management professional, and why are they important?

To thrive in Information Security Management, you need a solid understanding of cybersecurity principles, risk assessment, and compliance frameworks, often backed by a degree in information technology or a related field. Familiarity with tools like SIEM systems, vulnerability scanners, and certifications such as CISSP or CISM is highly valued. Strong analytical thinking, leadership, and communication skills help you effectively manage teams and convey security policies. These competencies are crucial for protecting organizational assets, ensuring regulatory compliance, and responding proactively to security threats.

What is the difference between Information Security Management vs Security Analyst?

AspectInformation Security ManagementSecurity Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISMCISSP, Security+, CEH
Work EnvironmentStrategic, policy development, management teamsOperational, monitoring security systems, incident response
Employer & Industry UsageOrganizations implementing security frameworks, management rolesIT departments, security teams, cybersecurity firms

While both roles focus on cybersecurity, Information Security Management involves overseeing security policies, strategies, and compliance at a managerial level. Security Analysts primarily handle day-to-day security monitoring, threat detection, and incident response. The management role is more strategic, whereas the analyst role is operational, but both require relevant certifications and work within the same industry environment.

What do information security managers do?

Information security managers oversee an organization’s cybersecurity strategy, develop policies to protect data and systems, and coordinate security efforts across teams. They often conduct risk assessments, implement security tools, and ensure compliance with industry standards and regulations.

What are popular job titles related to Information Security Management jobs in California?

For Information Security Management jobs in California, the most frequently searched job titles are:

What job categories do people searching Information Security Management jobs in California look for?

The top searched job categories for Information Security Management jobs in California are:

Information Security Management jobs near you
Infographic showing various Information Security Management job openings in California as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $134,322 per year, or $64.6 per hour.

Senior Information Security Manager

Fortinet, Inc.

Sunnyvale, CA • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 16 days ago

Job description

Fortinet looking for a Senior Information Security manager to join the Information Security team in the U.S. This position is responsible for leading the information security team, focusing on information security compliance projects. This role will oversee the design, implementation, operation, and continual improvement of the Information Security Management System (ISMS), coordinate security compliance initiatives across the organization, and serve as the primary liaison with external auditors and regulatory bodies. The position requires a strong understanding of ISO/IEC 27001 and NIST security frameworks, cloud security, risk management, governance, and security operations.

The successful candidate must be a U.S. citizen, and work onsite at Fortinet's headquarter in Sunnyvale, California.

Job Responsibilities:

  • Manage information security team, lead the design, implementation, operation, and continual improvement of the Information Security Management System (ISMS). 

  • Perform gap analysis based on NIST SP800-53 and other compliance framework, create mitigation/action plans. 

  • Determine the applicability and apply the information security and privacy requirements to ISMS policies. 

  • Prepare required documents for supporting various compliance frameworks such as FedRAMP and GovRAMP. 

  • Develop related KPI metrics for performance measurement, and for ensuring continued compliance and improvement.

  • Create compliance project plans. Manage the implementation.

  • Conduct risk and privacy impact assessments on business and operation processes. Prepare finding reports. Create and implement risk treatment plans. 

  • Collaborate with operation teams to ensure that appropriate controls are implemented and operated properly. 

  • Participate in and lead the daily security operation, oversee the handling of security alerts and incidents. 

  • Lead vulnerability management activities, monitor remediation progress, and work closely with operations teams to ensure timely patching of identified vulnerabilities.

  • Manage internal and external audits. Develop audit plans, respond to various audits and review requests.  

Skills and Qualifications:

  • 7+ years of experience in information security area, with people and project management experience. 

  • Subject matter expert of NIST SP800-53, ISO/IEC 27000 and SOC2 related standards, regulations and guidelines. 

  • Experience of managing FedRAMP or GovRAMP implementation and compliance is highly preferred. 

  • Knowledge and experience working with various information security frameworks (ISO/IEC 27001, NIST 800-53, NIST SP800-161, GovRAMP, FedRAMP, PCI DSS) and regulatory frameworks (SOX, PCI-DSS, HIPAA, GDPR, SOC, etc.)

  • Strong knowledge of and experience in privacy framework and regulatory compliance requirements (e.g., GDPR, CCPA).

  • Strong network security knowledge. Thorough understanding of current and emergent trends in information security

  • Working knowledge of information security control technologies including access control, cryptography, vulnerability management, SIEM/log management, ID/IPS, and penetration test.

  • Working knowledge and hardening skills on information technologies including Linux, Windows, VMWare, MySQL, MSSQL, etc.

  • Working knowledge of Cloud platforms, Cloud security (AWS, Azure, GCP) and network security. 

  • Experience and knowledge of Fortinet products and services are preferred. 

  • Strong verbal and written communication skills. Demonstrate ability to work with team members, cross functional and external parties. 

  • Ability to work independently in a fast-paced, dynamic environment. Able to establish priorities and meet deadlines.

  • Ability to provide continual attention to details. Strong analytical mindset. Able to gather and report data in meaningful format.

  • Passionate about policies, processes and documentation. Able to translate general standards to practical guidelines suitable for business operations. 

Educational & Certification Requirements:

  • Bachelor's degree in computer science, Information Security or related field;

  • A certification in one or more of the following desirable:

    • CISSP

    • CISA, CISM

    • ISO 27001 Lead-Auditor

    • VCP

    • CCSP

    • CRISC

  • NIST SP800-53 related training program.

  • GovRAMP/FedRAMP related training program.

About Our Team: 

Join our team, known for its collaborative ethos, working seamlessly with global customers, internal engineering teams and product development groups. Our team culture emphasizes continuous learning, innovation, and a strong commitment to customer satisfaction. We embrace Fortinet's core values of openness, teamwork and innovation, fostering an environment where team members support each other, share knowledge, and leverage AI to solve complex technical challenges. Our inclusive and dynamic team thrives on collaboration and is driven by the shared goal of maintaining Fortinet's high standards of excellence in cybersecurity solutions. 

Must be authorized to work in the U.S. without sponsorship.

The US base salary range for this full-time position is $166,500-$203,500. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time, as well as a comprehensive leave program.

Wage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the Company's discretion.


Why Join Us:

We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being.

Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe.

Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers its customers with intelligent, seamless protection across the expanding attack surface and the power to take on ever-increasing performance requirements of the borderless network - today and into the future. Only the Fortinet Security Fabric architecture can deliver security without compromise to address the most critical security challenges, whether in networked, application, cloud or mobile environments. Fortinet ranks number one in the most security appliances shipped worldwide and more than 500,000 customers trust Fortinet to protect their businesses.

We are committed to providing reasonable accommodations for all qualified individuals with disabilities. If you require assistance or accommodation due to a disability, please contact us at accommodations@fortinet.com.
 
Fortinet is an equal opportunity employer. We value diversity in our company, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, military/veteran status or any other applicable legally protected characteristics in the location in which the candidate is applying.

Apply