Senior Manager, Information Security & IT at Genea

Remote, USFull-timeRemoteTechnology Posted 20 days ago

About the Role

Job Title: Senior Manager, Information Security & IT  Reports To: Chief Technology Officer  Department: Technology – Information Security & IT  Work Location: Irvine, CA or US-Remote    About Genea  As leaders in property technology, Genea provides cloud-based physical security, submeter billing and on-demand HVAC solutions to over 1 million users across 39 countries. But Genea is more than just a workplace. We're a mission-driven team that collaborates, innovates, and engineers the proptech solutions of tomorrow to solve the challenges of today. We pride ourselves on fostering an environment of teamwork, transparency and authenticity, where you can be yourself. But don't take our word for it. Genea has been recognized as a Top Workplace in 2021-2025, with a rating of 4.3 out of 5 stars on Glassdoor. Our team members love our competitive benefits, including 401k matching, PTO, 100% paid parental leave, remote work options, and development/training opportunities.    Job Overview  Genea is looking for a hands-on Senior Manager, Information Security & IT to lead and continuously improve our cybersecurity and corporate IT programs.  Reporting to the CTO, this role will lead Genea's cybersecurity and IT programs across compliance, cloud and application security, incident response, identity and access management, and corporate IT.  Genea is already SOC 2 Type 2 compliant. This role will be responsible for continuously maintaining and maturing that program while helping drive additional cybersecurity and compliance initiatives, including ISO 27001 and other relevant frameworks as the business evolves.  We are looking for a cybersecurity leader who embraces AI, understands the evolving risks introduced by AI and agentic technologies, and can help Genea adopt AI securely while leveraging AI and automation to strengthen cybersecurity operations.  This is a hands-on leadership role for someone who can set direction, build scalable programs, lead the IT team and build out the cybersecurity function as needed, work closely with Engineering and other business teams, and remain involved in execution where needed.    Duties and Responsibilities  Cybersecurity Compliance & Programs  <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Own and continuously mature Genea's cybersecurity compliance program, including SOC 2 Type 2, policies, controls, audit readiness, evidence management, risk assessments, cybersecurity awareness, and readiness for ISO 27001 and other relevant frameworks. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Establish practical governance and guardrails for secure enterprise adoption of AI, including approved AI technologies, data protection, third-party AI risk, responsible usage, and emerging AI cybersecurity requirements. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Establish measurable cybersecurity KPIs, KRIs, risk reporting, and provide regular program updates to the executive team. </li> </ul>   Cloud & Application Security  <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1">Drive Genea's cloud and application security program in close partnership with Engineering, DevOps, Platform, and Product teams, including secure-by-design practices for traditional applications as well as AI and GenAI capabilities. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Strengthen cybersecurity across AWS and Azure, including IAM roles and permissions, least privilege, network controls, secrets management, encryption, logging, secure configurations, infrastructure hardening, and secure access to AI models, agents, APIs, and data. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Mature secure SDLC and DevSecOps practices, including threat modeling, architecture reviews, SAST/DAST, dependency and container scanning, software supply-chain security, and controls for emerging AI risks such as prompt injection and excessive agent permissions. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1">Own vulnerability management and coordinate internal and external penetration testing, prioritizing findings and driving remediation with Engineering. </li> </ul>   Incident Response & Cybersecurity Operations  <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1">Own cybersecurity monitoring, detection, investigation, and incident response across cloud, applications, endpoints, corporate systems, and AI-enabled services. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1">Lead incident response from triage and containment through recovery, post-incident review, and corrective actions, while maintaining playbooks and tabletop exercises. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="10" data-aria-level="1">Leverage AI and automation to improve threat detection, investigation, alert triage, and response, while monitoring emerging AI-enabled threats and attack techniques. </li> </ul>   Identity, Access Management & Corporate IT  <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="11" data-aria-level="1">Own corporate IT operations, including employee endpoints, MDM, SaaS applications, device lifecycle management, onboarding/offboarding, hardware and software provisioning, and employee IT support. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Manage identity and access across corporate and approved AI systems, including SSO, MFA, privileged access, least privilege, IAM policies, access reviews, API credentials, and joiner/mover/leaver processes. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="13" data-aria-level="1">Drive automation, standardization, patching, secure configuration, endpoint cybersecurity, access governance, and appropriate controls for enterprise AI tools and data usage. </li> </ul>   Team Leadership & Development  <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="14" data-aria-level="1">Lead and develop the IT team, establishing clear ownership, operational standards, and accountability across corporate technology and cybersecurity responsibilities. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="15" data-aria-level="1">Build the cybersecurity team as the organization grows, identifying capability gaps and hiring or developing the right talent across areas such as cybersecurity engineering, operations, compliance, and risk. </li> </ul>   Customer, Vendor & Cybersecurity Risk  <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="16" data-aria-level="1">Own customer cybersecurity questionnaires, RFP responses, customer security reviews, third-party assessments, and vendor cybersecurity risk, including material AI-related vendor and platform risks. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="17" data-aria-level="1">Represent Genea's cybersecurity program in customer and partner discussions and clearly communicate Genea's cybersecurity posture and controls. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="18" data-aria-level="1">Identify and track material cybersecurity risks, drive remediation, and ensure appropriate executive visibility. </li> </ul>   Qualifications  <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="19" data-aria-level="1">7+ years of experience across cybersecurity, information security, cloud security, application security, security engineering, or IT, including 2+ years in a leadership or management role. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="20" data-aria-level="1">Strong technical experience with cloud-native SaaS environments, including AWS and/or Azure, IAM, application security, cloud security, vulnerability management, endpoint cybersecurity, and incident response. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="21" data-aria-level="1">Experience with secure SDLC and DevSecOps practices, including threat modeling, penetration testing, SAST/DAST, dependency scanning, container scanning, and secrets management. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="22" data-aria-level="1">Practical experience with SOC 2 Type 2, ISO 27001, NIST, or similar cybersecurity frameworks, including working with auditors, assessors, penetration-testing firms, and cybersecurity vendors. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="23" data-aria-level="1">Working knowledge of AI/GenAI cybersecurity risks and secure AI adoption practices, including data protection, AI governance, LLM and agent security, and emerging threats such as prompt injection and excessive agent permissions. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="24" data-aria-level="1">Strong understanding of modern identity and corporate IT environments, including SSO, MFA, endpoint management, MDM, SaaS administration, and privileged access, with the ability to communicate cybersecurity risk clearly to Engineering teams, customers, business leaders, and executives. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="25" data-aria-level="1">Experience building or significantly maturing cybersecurity and IT programs within a growing SaaS technology company preferred. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="26" data-aria-level="1">Experience implementing cybersecurity automation across CI/CD, cloud infrastructure, compliance, cybersecurity operations, and AI-enabled workflows preferred. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="27" data-aria-level="1">Experience with technologies such as AWS, Azure, Okta, CrowdStrike or equivalent, SIEM, MDM, vulnerability-management platforms, and automated GRC tools preferred. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335551500":40158,"335552541":1,"335559685":431,"335559991":259,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="28" data-aria-level="1">Familiarity with AI cybersecurity frameworks and practices such as NIST AI RMF, OWASP GenAI/LLM guidance, AI red teaming, or securing agentic AI systems; CISSP, CISM, CCSP, or comparable cybersecurity certifications are preferred but not required. </li> </ul>   What Success Looks Like  Success in this role means Genea maintains a strong, measurable, and continuously improving cybersecurity posture while supporting the speed and growth of the business.  Cybersecurity risks are clearly identified and prioritized, compliance programs remain audit-ready, cloud and application security practices are integrated into Engineering workflows, AI is adopted with appropriate cybersecurity guardrails, incidents are handled effectively, enterprise customers have confidence in Genea's cybersecurity program, and corporate IT provides employees with a reliable and secure technology environment.  The ideal candidate combines strong technical judgment, practical cybersecurity risk management, operational discipline, a builder's mindset, and a willingness to embrace AI thoughtfully. Cybersecurity should enable the business and Engineering teams to move quickly and securely rather than become a bottleneck.    Compensation  $160-180K annual base salary. This role is also bonus eligible.  This range reflects what Genea reasonably expects to pay for this role at the time of posting. Where an offer falls within the range depends on the candidate's experience, qualifications, and skills, and on internal equity.    Benefits  Full-time employees are eligible to participate in a comprehensive benefits program that includes medical, dental, and vision insurance; flexible spending accounts (FSA); life insurance; accidental death and dismemberment (AD&D) insurance; long-term disability (LTD) coverage; paid time off (PTO); and a 401(k) retirement savings plan. Eligibility is subject to plan terms and conditions.    E-Verify  Genea participates in E-Verify to confirm the employment eligibility of all new hires working in the United States. For more information about E-Verify, please visit the <a href="https://www.e-verify.gov/">E-Verify website</a>.    Equal Employment Opportunity  Genea is an equal opportunity employer. We make employment decisions based on qualifications, merit, and business need.  Genea does not discriminate on the basis of race, color, religion or religious creed, national origin, ancestry, citizenship status, sex (including pregnancy, childbirth, breastfeeding, and related medical conditions), sexual orientation, gender, gender identity or expression, age, physical or mental disability, medical condition, genetic information, marital status, military or veteran status, height, weight, or any other characteristic protected by applicable federal, state, or local law.  This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, compensation, benefits, training, transfer, leave of absence, and termination.

About the Role

Related Roles