Sr Manager, InfoSec Governance Risk and Compliance (GRC) (San Francisco Bay Area, California, United States) Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.
Sr Manager, InfoSec Governance Risk and Compliance (GRC) (San Francisco Bay Area, California, United States) Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.
Sr Manager, InfoSec Governance Risk and Compliance (GRC) (San Francisco Bay Area, California, United States) Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.
Sr Manager, InfoSec Governance Risk and Compliance (GRC) (San Francisco Bay Area, California, United States) Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.
InfoSec Senior Engineer - Security Engineering & Architecture
Los Angeles, CA · On-site
$150K - $160K/yr
The InfoSec Senior Engineer - Security Engineering & Architecture is responsible for building security solutions that protect the business, but also allow the business to execute and innovate. The ...
InfoSec Senior Engineer - Security Engineering & Architecture
Los Angeles, CA · On-site
$150K - $160K/yr
The InfoSec Senior Engineer - Security Engineering & Architecture is responsible for building security solutions that protect the business, but also allow the business to execute and innovate. The ...
Staff Embedded InfoSec Engineer Primary: Bay Area (San Francisco/Peninsula) | Secondary: NYC About Us Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson ...
Staff Embedded InfoSec Engineer Primary: Bay Area (San Francisco/Peninsula) | Secondary: NYC About Us Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson ...
Staff Embedded InfoSec Engineer
San Mateo, CA · On-site
Staff Embedded InfoSec Engineer Primary: Bay Area (San Francisco/Peninsula) | Secondary: NYC About Us Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson ...
Staff Embedded InfoSec Engineer
San Mateo, CA · On-site
Staff Embedded InfoSec Engineer Primary: Bay Area (San Francisco/Peninsula) | Secondary: NYC About Us Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson ...
The Senior InfoSec / Identity Access Management Analyst is responsible for designing, implementing, and maintaining security controls that protect the credit union's systems, infrastructure, and data.
Quick apply
The Senior InfoSec / Identity Access Management Analyst is responsible for designing, implementing, and maintaining security controls that protect the credit union's systems, infrastructure, and data.
The Senior InfoSec / Identity Access Management Analyst is responsible for designing, implementing, and maintaining security controls that protect the credit union's systems, infrastructure, and data.
The Senior InfoSec / Identity Access Management Analyst is responsible for designing, implementing, and maintaining security controls that protect the credit union's systems, infrastructure, and data.
The Senior InfoSec / Identity Access Management Analyst is responsible for designing, implementing, and maintaining security controls that protect the credit union's systems, infrastructure, and data.
The Senior InfoSec / Identity Access Management Analyst is responsible for designing, implementing, and maintaining security controls that protect the credit union's systems, infrastructure, and data.
Sr. InfoSec Systems Engineer (Azure Cloud)
$122K - $168K/yr
The Sr. InfoSec Systems Engineer strives to enforce security best practices, policies, standards and guidance to ensure the safeguard of loanDepot's proprietary data, infrastructure and resources ...
Sr. InfoSec Systems Engineer (Azure Cloud)
$122K - $168K/yr
The Sr. InfoSec Systems Engineer strives to enforce security best practices, policies, standards and guidance to ensure the safeguard of loanDepot's proprietary data, infrastructure and resources ...
Manage and support InfoSec Senior team (SVP and direct reports) * Support InfoSec department as needed * Manage calendars for InfoSec Senior team * Schedule group meetings, conference calls, and ...
Manage and support InfoSec Senior team (SVP and direct reports) * Support InfoSec department as needed * Manage calendars for InfoSec Senior team * Schedule group meetings, conference calls, and ...
Executive Assistant
Culver City, CA · On-site
Manage and support InfoSec Senior team (SVP and direct reports) * Support InfoSec department as needed * Manage calendars for InfoSec Senior team * Schedule group meetings, conference calls, and ...
Executive Assistant
Culver City, CA · On-site
Manage and support InfoSec Senior team (SVP and direct reports) * Support InfoSec department as needed * Manage calendars for InfoSec Senior team * Schedule group meetings, conference calls, and ...
Leverages the Infosec LT and other governance boards and steering committees to ensure compliance. * Lead the organization: Develop, track, and control the security services annual operating and ...
Leverages the Infosec LT and other governance boards and steering committees to ensure compliance. * Lead the organization: Develop, track, and control the security services annual operating and ...
Space Information System Security Engineer (ISSE)
$165K - $210K/yr
IASAE's also participate in the National Space INFOSEC Steering Council, among others. Do you have what it takes? Requirements: * TS/SCI with Poly required * Bachelor's degree relevant to computer ...
Space Information System Security Engineer (ISSE)
$165K - $210K/yr
IASAE's also participate in the National Space INFOSEC Steering Council, among others. Do you have what it takes? Requirements: * TS/SCI with Poly required * Bachelor's degree relevant to computer ...
Leverages the Infosec LT and other governance boards and steering committees to ensure compliance. * Lead the organization: Develop, track, and control the security services annual operating and ...
Leverages the Infosec LT and other governance boards and steering committees to ensure compliance. * Lead the organization: Develop, track, and control the security services annual operating and ...
GCP Infrastructure Engineer
Irvine, CA · On-site
$133K - $226K/yr
The GCP Infrastructure Engineer within the InfoSec SWAT team is responsible for operating, securing, and optimizing Google Cloud Platform environments to support global resiliency and incident ...
GCP Infrastructure Engineer
Irvine, CA · On-site
$133K - $226K/yr
The GCP Infrastructure Engineer within the InfoSec SWAT team is responsible for operating, securing, and optimizing Google Cloud Platform environments to support global resiliency and incident ...
GCP Infrastructure Engineer
Irvine, CA · On-site
$133K - $226K/yr
The GCP Infrastructure Engineer within the InfoSec SWAT team is responsible for operating, securing, and optimizing Google Cloud Platform environments to support global resiliency and incident ...
GCP Infrastructure Engineer
Irvine, CA · On-site
$133K - $226K/yr
The GCP Infrastructure Engineer within the InfoSec SWAT team is responsible for operating, securing, and optimizing Google Cloud Platform environments to support global resiliency and incident ...
Security Specialist II
Port Hueneme Cbc Base, CA · On-site
$90K - $115K/yr
Demonstrated experience in Physical Security (PHYSEC) and Information Security (INFOSEC) within the Department of Defense (DoD) or the Intelligence Community (IC), showcasing a strong understanding ...
Quick apply
Security Specialist II
Port Hueneme Cbc Base, CA · On-site
$90K - $115K/yr
Demonstrated experience in Physical Security (PHYSEC) and Information Security (INFOSEC) within the Department of Defense (DoD) or the Intelligence Community (IC), showcasing a strong understanding ...
About You and The Role Zipline operates autonomous delivery systems that combine cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. Security must ...
About You and The Role Zipline operates autonomous delivery systems that combine cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. Security must ...
GCP Infrastructure Engineer
Irvine, CA · On-site
$114K - $149K/yr
The GCP Infrastructure Engineer within the InfoSec SWAT team is responsible for operating, securing, and optimizing Google Cloud Platform environments to support global resiliency and incident ...
GCP Infrastructure Engineer
Irvine, CA · On-site
$114K - $149K/yr
The GCP Infrastructure Engineer within the InfoSec SWAT team is responsible for operating, securing, and optimizing Google Cloud Platform environments to support global resiliency and incident ...
About Zipline Zipline is the world's largest and most experienced drone delivery service. We are on a mission to serve all humans equally by ensuring access to food, medicine and essential goods ...
Quick apply
About Zipline Zipline is the world's largest and most experienced drone delivery service. We are on a mission to serve all humans equally by ensuring access to food, medicine and essential goods ...
Infosec information
See California salary details
$42.47 - $48.50
18% of jobs
$51.52 is the 25th percentile. Wages below this are outliers.
$48.50 - $54.54
14% of jobs
$54.54 - $60.58
9% of jobs
$60.58 - $66.62
5% of jobs
The median wage is $68.13 / hr.
$66.62 - $72.66
17% of jobs
$72.66 - $78.70
12% of jobs
$81.72 is the 75th percentile. Wages above this are outliers.
$78.70 - $84.74
1% of jobs
$84.74 - $90.78
1% of jobs
$90.78 - $96.81
7% of jobs
$96.81 - $102.85
5% of jobs
$102.85 - $108.89
11% of jobs
$42
$73
$108
How much do infosec jobs pay per hour?
What is Infosec?
What are some common challenges faced by Infosec professionals when working with cross-functional teams?
What are the key skills and qualifications needed to thrive as an Information Security (Infosec) professional, and why are they important?
What Is InfoSec?
InfoSec, a shortening of information security, is a set of practices carried out by information and cybersecurity specialists designed to prevent hacking or unauthorized access to private information and data, databases, or services. Your responsibilities are to design or improve systems built to protect sensitive information, such as electronic health records, industry or trade secrets like proprietary code or industrial designs, or national security information. Although much contemporary InfoSec revolves around protecting digital information, there are still large amounts of physical information that must be protected from unauthorized access.
What is the difference between Infosec vs Cybersecurity Analyst?
| Aspect | Infosec | Cybersecurity Analyst |
|---|---|---|
| Certifications | CompTIA Security+, CISSP, CISA | CompTIA Security+, CISSP, CEH |
| Work Environment | Organizations' security teams, IT departments | Security operations centers, IT security teams |
| Industry Usage | Broad, including government, finance, healthcare | Primarily tech, finance, and government sectors |
| Job Focus | Overall security policies, risk management | Monitoring, incident response, vulnerability assessment |
Infosec (Information Security) is a broad field encompassing policies, risk management, and overall security strategy. A Cybersecurity Analyst typically focuses on monitoring systems, responding to threats, and vulnerability management within the broader Infosec framework. While both roles require similar certifications and work in security teams, Infosec professionals often handle strategic planning, whereas Cybersecurity Analysts are more operational.

Full-time
Medical, Dental, Vision
Re-posted 15 days ago
Job description
(San Francisco Bay Area, California, United States)
Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.
COMPANY OVERVIEW
At Ivalua we are a global community of exceptional professionals, who believe that digital transformation revolutionizes supply chain sustainability and resiliency to unlock the power of supplier collaboration.
We achieve this through our leading cloud-based spend management platform that empowers hundreds of the world's most admired brands to effectively manage all categories of spend and all suppliers to increase profitability, improve ESG (environmental, social, and corporate governance) performance, lower risk, and improve productivity. Driven by our passions and fueled by our shared ambitions, we empower and challenge each other to create meaningful experiences for our colleagues, customers, partners, and communities.
Learn more at www.ivalua.com. Follow us on LinkedIn and Twitter.
THE OPPORTUNITY
CONTEXT:
Our InfoSec team is dedicated to building, maintaining, and continuously improving Ivalua's Information Security program globally. We provide peace of mind and assurance of protection and safety to our customers. In this fast-growing environment, the GRC program is critical to ensuring compliance with industry standards and certifications, managing risks, and supporting business growth.
ROLE:
We are currently looking for an experienced InfoSec Governance Risk and Compliance (GRC) Sr Manager to lead a global team and own the GRC program worldwide. Reporting to the InfoSec leadership, you will manage and develop a high-performing team, drive compliance efforts, and serve as a subject matter expert on security frameworks and standards.
WHAT YOU WILL DO WITH US
- Lead and own the Governance, Risk, and Compliance (GRC) program globally, managing and developing a high-performing team.
- Manage and drive compliance efforts and audits for certifications such as FedRAMP, IRAP, ISO 27001, HIPAA, SOC1/SOC2, PCI DSS, and others.
- Serve as the subject matter expert (SME) on security frameworks and standards including NIST SP 800-53 Rev 5, NIST 800-171, ITAR, FedRAMP, PCI DSS, SOC2, etc., providing guidance to internal stakeholders.
- Efficiently manage and respond to customer security audit and compliance requests in a timely manner.
- Maintain continuous compliance and monitoring of security controls to ensure ongoing adherence to standards.
- Collaborate closely with Sales, Marketing, and Customer Success teams to effectively communicate Ivalua's security posture to prospects and customers.
- Review and negotiate information security exhibits and contractual terms in partnership with the legal team.
- Lead the Security Awareness and Training program to promote a culture of security across the organization.
- Track, manage, and drive remediation efforts for control deficiencies and gaps identified through internal and external audits.
- Oversee the Third Party Risk and Vendor Security Assessment program to mitigate supply chain risks.
- Develop, maintain, and enforce InfoSec policies, standards, and plans.
YOUR PROFILE
If you have the below experience and strengths this role could be for you:
Skills and Experience:
- At least 7+ years of proven experience leading GRC programs and managing compliance certifications and audits (FedRAMP, ISO 27001, HIPAA, SOC1/SOC2, PCI DSS, IRAP, etc.).
- At least 3+ years experience as a direct leader, managing a team. The position will be part of an established global team with opportunity to grow the team
- Strong knowledge of security frameworks such as NIST SP 800-53, NIST 800-171, ITAR, PCI DSS, SOC2, and FedRAMP.
- Demonstrated ability to manage and influence stakeholders across multiple departments and time zones.
- Excellent project management, analytical, and problem-solving skills with keen attention to detail.
- Strong interpersonal and communication skills, capable of building trust and managing conflicts effectively.
- Self-motivated with a high degree of initiative and ability to work independently.
- Ability to handle multiple competing priorities and deadlines efficiently.
- Bachelor's degree in related field preferred or equivalent experience with proven skills
Soft Skills:
- Excellent interpersonal, communication, and organizational skills.
- Team player with the ability to interface effectively with a broad range of individuals and roles, including IT and vendors.
- High degree of initiative, dependable, and able to work well with limited supervision.
WHAT HAPPENS NEXT
If your application fits this specific position's needs, our skilled Talent team will reach out to schedule an initial screening call. Get one step closer to achieving your goals - apply today!
Our Talent team will guide you through every step of the interview process - from preparation to completion. They're here to support you!
Our recruitment process is designed to assess your competencies through a series of personalized interviews with internal stakeholders relevant to the role.
Interviews will be conducted virtually via video or on-site with face-to-face meetings.
LIFE AT IVALUA
- Hybrid working model (3 days in the office per week)
- We're a team dedicated to pushing the boundaries of product innovation and technology
- Sustainable Growth, Privately Held
- A stable and cash-flow positive Company since 10 years
- Snacks and weekly lunches in the office
- Feel empowered to pursue your goals with improved team collaboration and increased creativity/productivity
- Unlock and unleash your full professional potential with our exceptional training and career development program
- Join a dynamic and international team of top-notch professionals who are experts in their respective fields. Collaborate with like-minded individuals who are deeply passionate and highly motivated about their work. Experience a truly diverse and inclusive work environment where your unique contributions are highly valued
- Regular social events, competitive outings, team running events, and musical activities,
- Comparably recognized Ivalua for the following (https://www.comparably.com/companies/ivalua) :
Powered by People - Powered by You!
United by our values we embrace diversity and equity in the broadest possible sense to create an inclusive workplace. To help our customers make supply chains more efficient, sustainable and resilient, we rely on a global team with a variety of backgrounds, skills and views. We believe in equal opportunity and in diversity as a driver of innovation that cultivates a spirit of inclusiveness, creates a productive and fun place to work, and provides fulfilling career opportunities for all Ivaluans. https://www.linkedin.com/company/ivalua/about/
Experience life at Ivalua - check out our captivating video! Gain insight into our unique company culture and get a glimpse of what it's like to work with us.
Ivalua's core values include a priority on Care & Grow People. We take matters like pay equity very seriously and strive to reward our employees appropriately and fairly for their talents.
The compensation range for this position reflects the cost of labor across our US locations and is based upon careful and continual market research. In addition to location, compensation may also vary based upon job-related knowledge, skills, and experience.
Title: Manager, InfoSec Governance Risk and Compliance (GRC)
Range minimum: USD 112000
Range maximum: USD 208000
Additional compensation / rewards: Ivalua also offers exceptional benefits including medical, dental, vision and transportation.
#LI-SG1
#LI-HYBRID
#LI-DNI
About Ivalua
Sourced by ZipRecruiter
Industry
Software development
Company size
51 - 200 Employees
Headquarters location
Redwood City, CA, US
Year founded
2000