Manager, IT Security

The role

You will lead security operations, strengthen security posture, and proactively identify and address risks. You will manage one security engineer and remain involved in technical execution across cloud, identity, endpoint, and AI security.

What you will do

• Lead security improvements across AWS including IAM, multi-account governance, networking, and security monitoring.
• Manage identity and access controls through Microsoft Entra ID, Conditional Access, SSO/SCIM, and privileged access management.
• Maintain and strengthen endpoint security, patching, EDR coverage, and security monitoring.
• Optimize existing security tools including Rapid7, Intune, and NinjaOne.
• Own vulnerability management from detection and prioritization through remediation.
• Lead incident response and coordinate with MDR provider.
• Partner with AI and Engineering teams to secure AI tools, agents, and integrations.
• Own Foley's SOC 2 Type II audit process end to end.
• Maintain PCI DSS compliance requirements and support security policies and vendor risk assessments.
• Partner with Engineering to strengthen security across development environments, CI/CD pipelines, source control, and application integrations.

Required qualifications

• 7+ years of information security experience, including experience leading security initiatives or programs and managing or formally leading security professionals.
• Strong hands-on AWS security experience, including IAM, multi-account governance, network security, and AWS-native security services such as GuardDuty, Security Hub, and CloudTrail.
• Deep experience with Microsoft Entra ID, Conditional Access, SSO/federation, privileged access, and identity lifecycle management.
• Demonstrated experience with endpoint security, vulnerability management, incident response, and MDR/SOC partnerships.
• Proven experience owning SOC 2 Type II audits end to end, including control implementation, evidence collection, audit coordination, and remediation.
• Working knowledge of AI security risks, including data leakage, over-privileged agents, non-human identities, and secure AI integrations.
• Proactive approach to identifying risks, recommending solutions, and driving improvements independently.
• Strong communication skills across technical and business audiences.

Nice to have

• Experience with PCI DSS and security frameworks such as NIST CSF, ISO 27001, and CIS Controls.
• Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or Microsoft SC-series.
• Scripting, automation, or infrastructure-as-code experience.
• Experience securing a distributed workforce in a lean or regulated environment.

Benefits

• Medical coverage
• Dental coverage
• Vision coverage
• 401(k) with company match
• Paid time off and holidays
• Wellness programs
• Employee assistance program

About the company

Foley is a modern SaaS company with an all-in-one, AI-ready platform that helps transportation, construction, distribution, and utility businesses operate faster, smarter, and safer.