Information Security Manager

Overview

Lead and manage information security strategy, policies, and team for North America.

Key Responsibilities

• vulnerability management
• incident coordination
• security governance
• compliance management
• data analysis
• security strategy

Tasks

-access or use the online application process and need an alternative method for applying -Oversee and enforce security policies, procedures, and standards aligned with the NIST Cybersecurity Framework (CSF). -Leadership: Guides and mentors team members, manages vendors, and influences decision-making. -Champion North American priorities within the global security team, influencing programs and projects. -Coordinate North American IT teams during cybersecurity incidents. -Help define budgets for security operations and monitor expenses. -Oversee audits, analyze gaps, design remediation plans, and ensure closure of actions. -complete any part of the application process -Adapt global security procedures to meet the needs of North American users and systems. -Ensure compliance with relevant laws, regulations, and frameworks (e.g., CMMC, privacy and AI laws). -Analyze data to propose security improvements for North American systems. -Develop, implement, and maintain our information security strategy, ensuring the confidentiality, integrity, and availability of company data and systems. -Prepare and present regular reports on security operations and projects to senior management. -Lead vulnerability management, risk assessments, and incident response planning. -Recruit, train, and mentor security team members, and manage relationships with external vendors.

Requirements

• azure
• cissp
• nist
• leadership
• risk management
• collaboration

What You Bring

-Experience with cloud infrastructure security (Azure preferred; OCI, AWS, Google also valued). -French language skills are a plus. -Deep knowledge of security technologies (network, endpoint, email, identity & access management, application, data security). -Time management and empathy: Prioritizes tasks and fosters a security-conscious culture. -Excellent communication: Able to convey complex security concepts to technical and non-technical audiences. -Minimum 6 years of information security experience, with at least 3 years in a leadership or managerial role. -Physical requirements: Prolonged computer use, basic hand-eye coordination, and occasional travel. -Employment requirements: Must be legally authorized to work in the United States. Pre-employment criminal background check and drug screening required. -Strong understanding of security frameworks and best practices (NIST CSF, CMMC, ISO 27001). -Bachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred). -Regulatory compliance, risk management, and audit process expertise. -Collaborative mindset: Works effectively with cross-functional teams. -CISSP, CISM, or equivalent certifications preferred. -Critical thinking and business acumen: Balances cybersecurity strategy with business goals. -At least 2 years of experience working in a matrixed environment within a large organization.

People Also Searched For

Benefits

-Remote work: This position is fully remote within the continental United States.

About Colas

-A global leader in the construction and maintenance of transport infrastructure. -Expertise spans across sectors including roads, railways, airports, seaports, and urban development projects. -Significant focus on road construction and maintenance, from local roads to major highways. -Active in railway sector, involving design, construction, and maintenance of rail networks, including high-speed lines, conventional tracks, and urban transport systems. -Specializes in waterproofing solutions to protect buildings and structures from water damage. -Engages in production and recycling of construction materials, contributing to a more circular economy in the construction industry.

Sector Specialisms

Interview Process

-applications close sunday, november 23, 2025. -screening of selected applicants the week of november 24, 2025. -interviews begin the week of december 01, 2025.

Security Clearance

-pre‑employment criminal background check and drug screening required.