Senior Information Security Governance Manager

• The primary goal of the Information Security team is to build trust with our rapidly growing customer base by ensuring the Sonar organization meets a high level of security to protect our customers
• As a member of the Information Security team, you will be based in Sonar’s Austin office leading the Security Governance and Customer Trust domains of our security risk management program
• You will also support security incidents from time to time as needed. Your positive contributions will significantly impact the growth of the business through Sonar’s “collective intelligence” mindset
• Customer Interaction: Manage and participate in a clear process to provide clear security answers to our customers and internal users. This includes information on our Trust Center and also meeting with customers to provide required information
• Trust System Management: Ensure our customer trust systems are accurate and support federated security support across Sonar. Drive improvements and enhanced capability implementation in our tooling
• AI Prompt Engineering: Develop and refine prompts and automated workflows using LLMs to enhance our abilities in ensuring security information systems are valid and up to date
• Security Initiative Leadership: Support assigned security initiatives, ensuring they are delivered on time, within scope, and aligned with the broader InfoSec roadmap. Take part in critical, high-impact technical and strategic decisions, proactively influencing cross-functional teams to achieve ambitious objectives
• Coaching & Cross-Functional Quality: Coach and mentor team members and cross-functional colleagues on complex problem-solving, risk management methodologies, and security best practices. Take ownership of broader cross-functional execution and quality standards to raise the bar across the InfoSec program
• Security Governance: Own and maintain Sonar’s security governance program and associated artifacts

Benefits

• 401K Plan: Sonar US matches up to 4% of gross salary
• 90% healthcare premium coverage for employees, 60% for dependents
• EAP (Employee Assistance Program) Health Savings Accounts (HSA, FSA, DCFSA). Supplemental coverage is offered by EE’s expense
• Life and disability insurances fully paid by Sonar. Sonar covers 100% of Telemedicine for FTE whom are covered by Sonar medical
• Pet Insurance
• Hospital Indemnity, Accident, Critical Illness
• Time Off: 25 PTO days plus additional days based on seniority and circumstances
• Commuting: Public transport reimbursement of 60% for annual subscription
• Free parking space
• Pension: Sonar UK contributes 50% of the total costs, which amounts to 5% of your gross salary for saving. Employees contribute the other 5%
• Flexibility to work from home 2 days a week on Wednesdays and Fridays
• Time Off: 28 PTO days, plus additional days based on seniority and circumstances
• Health Insurance: Sonar covers 100% of the employee premiums for medical, dental, and EAP (Employee Assistance Program) plans through BUPA
• Commuting: we will reimburse 60% towards the cost of an annual public transport pass

• Strategic Security Documentation: Ability to draft sophisticated policy language, control descriptions, and executive-level reports that bridge the gap between technical reality and business risk. Able to communicate strategic matters effectively to varying and diverse audiences
• Technical Diplomacy & Strategic Communication: Exceptional communication skills with the ability to influence cross-functional stakeholders, explain complex security requirements to non-technical peers in a way that fosters collaboration, and fully own complex problem resolution from communication through execution
• AI Proficiency: Demonstrated ability to leverage AI tools and develop complex prompts to solve non-linear security problems and automate repetitive governance tasks. Ability to establish best practices for AI-driven security workflows that others can adopt
• Unwavering Customer Obsession: You view security as an enabler. You are dedicated to building solutions that allow teams to move fast and innovate without compromising the safety of the organization or our users
• Autonomous Leadership & Organizational Acumen: Strong organizational skills to manage multiple high-stakes remediation projects simultaneously under broad objectives with minimal supervision. Ability to take part in critical, high-impact decisions, mitigate risk within the domain, and proactively influence cross-functional teams to achieve ambitious objectives and model best practices
• Extensive Multi-Domain InfoSec Expertise: Deep, extensive experience and knowledge across multiple security domains, examples include Cloud Security, GRC (Governance, Risk, and Compliance), Identity & Access Management (IAM), or Application Security. You are considered a reference by teams and leaders in your areas of expertise