Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 54 days agoWe saw it 13 min after it went up

Manager, Information Security

Synack10 open roles

Pay
$150,000 – $180,000 a year
Where
Remote in the US
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowManager, Information SecuritySynack · Remote in the US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Synack's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.3% of postings close within 7 days. Measured by our own scanner across the market. Synack postings stay open a median of 51 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.2%3 days
  3. 11.3%7 days
  4. 17.5%14 days
  5. 34.2%30 days
  6. 43.5%60 days
This job: posted 54 days ago

Synack median: 51 days open

The posting

NetSPI+Synack is a leader in offensive security, combining elite human expertise with agentic AI to help organizations identify, validate, prioritize, and remediate exploitable risk across their entire attack surface. Its platform delivers expert-validated testing in depth, continuously, or on demand, from pre-production code to live production environments, so security teams can separate vulnerability noise from real risk, including the growing threat of AI-driven attacks. With global reach and more than 13 million hours of real-world offensive testing experience, NetSPI+Synack serves many of the world's largest enterprises and government organizations with one ambition: nothing left to exploit.

We are looking for individuals with a collaborative, innovative, and customer-first mindset to join our team. Learn more about our award-winning workplace culture and get to know our A-Team at www.netspi.com/careers and www.synack.com/careers.

We are looking for a talented Information Security Compliance Manager with deep expertise in ISO, SOC, CMMC and FedRAMP compliance. You will work closely with the Product, Engineering, and Operations teams to ensure proper security controls and monitoring are applied. Sounds interesting? Keep reading…

**Please note that due to federal government contract requirements, we can only hire a citizen of the United States into this role.

Here’s what you'll do

  • Automate generation of System Security Plans (SSP), including Security Concept of Operations, Risk Management Matrix, Security Control Traceability Matrix, and conduct Security Impact Analysis (SIA) on major system changes.
  • Develop and maintain automated Plans of Action and Milestones (POAMs).
  • Contribute to the adoption and implementation of automation and use of Artificial Intelligence (AI) within Synack's Information Security operations.
  • Own the inventory and risk assessments of AI/agentic systems used across Synack, aligned to NIST AI RMF and ISO 42001, including data handling, model and agent change control, non-human identity and credential scoping.
  • Build and own automated evidence collection and control-drift around security controls.
  • Communicate regularly with stakeholders on security compliance issues aligning to CIS and NIST standards, track mitigation/remediation tasks, and assisting in generation of reports and metrics.
  • Codify security controls into IaC guardrails, CNAPP policies, and CI/CD checks to prevent risks at commit and deploy time.
  • Working with Project Managers and Software Engineers in a collaborative and enabling (non-obstructive) manner; Ensuring appropriate information security policies, standards, procedures, and guidelines are being incorporated across Synack hosted services and infrastructure, with a focus on hardening and adhering to DevSecOps principles.
  • Coordinate with the field teams to respond to vendor security assessments and conduct 3rd party risk assessments of Synack vendors.

Here’s what you’ll need

  • 8+ years of experience IT Security Strategy, Risk Management, IT Audit and Compliance with a Cloud Service Provider
  • Experience with Python, Terraform, and CI/CD pipelines, plus comfort integrating tools with AI.
  • Experience with Enterprise Governance, Risk Management, and Compliance (GRC) tools.
  • Experience with event monitoring and alerting tools such as Datadog, Stackdriver, and Azure Sentinel.
  • Experience with SOAR or auto-remediation platforms and detection engineering / SIEM query languages.
  • Experience with Cloud Native Application Protection Platforms (CNAPP).
  • Experience with leveraging security tools within the Software Development Lifecycle (SDLC).
  • Familiarity with secrets management and workload identity (non-human).
  • Working knowledge of security regulations, standards, and frameworks, including but not limited to ISO27000, ISO42001, OWASP, SOC2, GDPR, CMMC, FedRAMP, and NIST.
  • Excellent written and verbal communication skills with the ability to accurately communicate security and risk-related information to technical and non-technical audiences.

Ready to join us?

Synack is committed to embracing diversity. Our people are our strength. Each addition to our team is an opportunity to grow and diversify our ideas, experiences, and viewpoints. Synack strives to be inclusive of all people.

As a candidate, Synack cares about your privacy. Please view our candidate privacy policy.

This position has responsibility to ensure Synack’s security and privacy posture is maintained.

$150,000 - $180,000 Salary is determined by a combination of factors including location, level, relevant experience, and skills. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. The compensation package for this position may also include equity, and benefits.

For more details about our benefits, please see our benefits overview. Then for the Employer code, enter: synack

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Synack's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Synack's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Synack's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.