Senior Manager, Cyber Security – SaaS

Aravo Solutions - Integrated Risk & Resilience

Senior Manager, Cyber Security managing security program at Aravo Solutions. Leading vulnerability management and security policy enforcement for robust third-party risk management solutions.

Posted 5/27/2026full-timeAustin • Texas • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

AWSCloudSDLC

About the role

Key responsibilities & impact

Define and execute Aravo’s security roadmap, aligning priorities with business goals and communicating progress through scorecards, dashboards, and KPIs
Lead vulnerability management programs across product and infrastructure, ensuring effective triage, prioritization, and remediation
Partner with Product Engineering to implement and maintain secure development practices, including code review and SDLC controls
Establish and enforce company-wide security policies and standards in collaboration with Corporate IT
Own and continuously improve Aravo’s cloud security posture in alignment with industry best practices and compliance frameworks
Drive FedRAMP readiness and authorization efforts, coordinating cross-functional execution
Evolve and scale our compliance programs (e.g., SOC2) to meet changing business and regulatory needs
Translate technical risk into strategic goals that drive informed decisions and measurable business outcomes across Engineering, Leadership, and Customers
Maintain an accurate and actionable risk register, ensuring findings are tracked to closure
Build relationships across the company to drive cross-functional security execution
Own security incident response planning and execution
Lead and mentor security team members, fostering a culture of growth and continuous learning

Requirements

What you’ll need

8-12 years of progressive security experience, with 3-5 years in a leadership role
Expertise in building vulnerability management programs in SaaS environments, including tool selection, risk-based prioritization, and tracking remediation to closure
Demonstrated ability to design and implement secure infrastructure across managed hosting, hybrid, and cloud environments
Track record of managing compliance programs and implementing security frameworks (e.g., SOC2, NIST 800-53), including control design, implementation, and continuous compliance monitoring
Strong background in developing and maintaining a risk register and translating technical risks into business language
Hands-on experience with FedRAMP compliance programs, including control implementation, documentation, and authorization processes
Proficiency in designing security metrics, dashboards, and KPIs that align with business outcomes
Experience in designing and leading security incident response programs
**Preferred Qualifications/Skills/Soft Skills: (Optional)**
Relevant security certifications:
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
AWS Security Specialty (SCS-C02)
FedRAMP Moderate or High authorization experience, including Third-Party Assessment Organization (3PAO)
Experience designing and implementing Zero Trust architecture frameworks
Background in securing containerized workloads and cloud-native services

Benefits

Comp & perks

100% Employer Paid Gold Tier Medical Insurance options for the Employee and Family
Paid Maternity and Paternity Leave
Life and AD&D Insurance
Long-Term Disability Insurance
401K with Company Matching
Equity Participation
4 Weeks of Vacation to start
Fully Stocked Kitchens
Company-Sponsored Charitable Day of Giving Events
Aravo Solutions Inc. is registered as an employer in many, but not all, states. If an applicant is not in or able to work from a state where Aravo Solutions Inc. is registered, they may not be eligible for employment. The eligible states include: FL, GA, MA, MO, NC, NH, NV, OR, PA, SC, TN, and TX.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability managementsecure development practicesSDLC controlscloud securitycompliance programsrisk registersecurity metricsincident responseZero Trust architecturecontainerized workloads

Soft Skills

leadershipcommunicationcollaborationmentoringrelationship buildingstrategic thinkingproblem solvingcontinuous learningorganizational skillscross-functional execution

Certifications

Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)AWS Security Specialty (SCS-C02)