Information Security Compliance Manager

Information Security & Compliance Manager | Hybrid, Providence, RI | $130,000 - $160,000

A highly regarded professional services organisation is seeking an experienced Information Security & Compliance Manager to lead and develop its cybersecurity, data governance, and regulatory compliance program.

This is a newly elevated leadership role, offering the opportunity to build and shape a security function from the ground up while working closely with senior leadership and cross-functional teams.

The Role

You will act as the organisation’s subject matter expert for information security and compliance, taking ownership of the full lifecycle of the security programme, from design through to implementation and ongoing management.

This is a hands-on leadership role requiring both strategic thinking and practical execution, with significant exposure to senior stakeholders.

Key Responsibilities

• Design, implement, and manage the organisation’s information security and compliance programme
• Develop and maintain security architecture, governance frameworks, policies, and procedures
• Ensure compliance with relevant regulatory and industry standards (e.g., SOC 2, HIPAA, state-level regulations)
• Partner with IT to evaluate and manage security technologies (SIEM, EDR, IAM, DLP, etc.)
• Lead risk assessments, audits, and compliance initiatives
• Manage third-party/vendor risk and security reviews
• Develop and oversee incident response planning and readiness
• Promote a security-first culture across the organisation through training and collaboration
• Work cross-functionally with legal, technical, and operational stakeholders to embed best practices

Requirements

• Approximately 5 years’ experience in information security, cybersecurity, or compliance
• Proven experience building security or compliance programmes from the ground up
• Strong understanding of:
• SOC 2
• NIST / ISO frameworks
• Data protection and regulatory compliance (e.g., HIPAA, state laws)
• Experience working with and administering security tools and platforms
• Ability to operate both strategically and hands-on
• Strong communication skills, with the ability to engage non-technical stakeholders
• Experience in professional services or regulated environments is advantageous but not essential

Desirable (Not Essential)

• Industry certifications such as CISSP, CISM, CRISC, or similar
• Experience working within legal or highly regulated environments

Why Apply?

• Opportunity to build and own a security function from scratch
• High level of autonomy and visibility within the business
• Collaborative, cross-functional environment
• Strong long-term career development potential

Process

• Initial virtual interviews followed by final-stage in-person meeting
• Streamlined process with feedback at each stage

If you’re looking for a role where you can make a visible, lasting impact and shape security strategy at an organisational level, we’d love to hear from you.