Information Security Manager

Colas Usa

The Role

Overview

Lead and manage information security strategy, policies, and operations for North America.

Key Responsibilities

  • security strategy
  • vulnerability management
  • incident response
  • risk assessment
  • audit management
  • compliance

Tasks

-Develop, implement, and maintain our information security strategy, ensuring the confidentiality, integrity, and availability of company data and systems. -Champion North American priorities within the global security team, influencing programs and projects. -Ensure compliance with relevant laws, regulations, and frameworks (e.g., CMMC, privacy and AI laws). -Oversee audits, analyze gaps, design remediation plans, and ensure closure of actions. -complete any part of the application process -Oversee and enforce security policies, procedures, and standards aligned with the NIST Cybersecurity Framework (CSF). -Coordinate North American IT teams during cybersecurity incidents. -Prepare and present regular reports on security operations and projects to senior management. -Lead vulnerability management, risk assessments, and incident response planning. -Recruit, train, and mentor security team members, and manage relationships with external vendors. -Help define budgets for security operations and monitor expenses. -Analyze data to propose security improvements for North American systems. -access or use the online application process and need an alternative method for applying -Leadership: Guides and mentors team members, manages vendors, and influences decision-making. -Adapt global security procedures to meet the needs of North American users and systems.

Requirements

  • cissp
  • azure
  • nist
  • iso 27001
  • leadership
  • communication

What You Bring

-Excellent communication: Able to convey complex security concepts to technical and non-technical audiences. -Time management and empathy: Prioritizes tasks and fosters a security-conscious culture. -Physical requirements: Prolonged computer use, basic hand-eye coordination, and occasional travel. -Employment requirements: Must be legally authorized to work in the United States. Pre-employment criminal background check and drug screening required. -Bachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred). -Experience with cloud infrastructure security (Azure preferred; OCI, AWS, Google also valued). -Strong understanding of security frameworks and best practices (NIST CSF, CMMC, ISO 27001). -Collaborative mindset: Works effectively with cross-functional teams. -Minimum 6 years of information security experience, with at least 3 years in a leadership or managerial role. -Critical thinking and business acumen: Balances cybersecurity strategy with business goals. -CISSP, CISM, or equivalent certifications preferred. -Regulatory compliance, risk management, and audit process expertise. -Deep knowledge of security technologies (network, endpoint, email, identity & access management, application, data security). -French language skills are a plus. -At least 2 years of experience working in a matrixed environment within a large organization.

Benefits

-Remote work: This position is fully remote within the continental United States.

The Company

About Colas Usa

-As part of Colas Group—with 58,000 employees globally—they bring international expertise to U.S. road, rail, maritime, and airport projects. -They’ve executed major projects from highway and bridge construction to airport taxiways and military base infrastructure. -Their formation of Colas Construction USA Inc. in 2021 unified regional subsidiaries to tackle large federal, mining, and complex projects. -They serve diverse sectors—heavy civil, transport, industrial sites, mining support, and water/wastewater infrastructure. -A standout fact: they operate continuously from Alaska to Florida, blending local agility with global backing.

Sector Specialisms

Road Construction

Bridge Construction

Airport Construction

Port Construction

Military Bases Construction

Rail Infrastructure

Dam Construction

Canal Construction

Infrastructure Development

Construction Materials

Aggregates

Asphalt Paving

Concrete Paving

Pavement Preservation

Excavation and Grading

Ready-Mix Concrete

Site Development

Asphalt Emulsions

Polymer Modified Binders

Warm Mix Asphalt

Ecomat

Construction Maintenance

Urban Development

Recreational Facilities

Interview Process

-applications close on sunday, november 23, 2025. -screening of selected applicants begins the week of november 24, 2025. -interviews with the hiring manager start the week of december 1, 2025.

Security Clearance

-pre-employment criminal background check required. -drug screening required.