Senior Information Security Manager

Fortinet

Fortinet cybersecurity manager leading ISMS compliance, audits, risk management, and security operations. Overseeing controls, vulnerabilities, incidents, and regulatory frameworks for a global security solutions provider.

Posted 8/18/2026full-timeSunnyvale • California • 🇺🇸 United StatesSenior💰 $166,500 - $203,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading information security teams and managing compliance with frameworks such as NIST SP800-53, FedRAMP, and GovRAMP. Proficient in risk management, vulnerability management, and developing performance metrics to ensure continual improvement in information security practices.

Highest-signal resume keywords

NIST SP800-53 ComplianceFedRAMP ImplementationRisk ManagementVulnerability ManagementInformation Security Management System (ISMS)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityProject ManagementGap AnalysisKPI DevelopmentRisk AssessmentPrivacy Impact AssessmentNetwork SecurityAccess ControlCryptographyPenetration Testing

Soft Skills

Strong Communication SkillsAttention to DetailAnalytical AbilitiesAbility to Work IndependentlyPrioritization Skills

Tools & Technologies

AWSAzureGCPLinuxWindowsVMwareMySQLMSSQLFortinet ProductsSIEM/Log Management

Industry Keywords

ISO/IEC 27000SOC2PCI DSSSOXHIPAAGDPRCCPACompliance FrameworksSecurity OperationsAudit Management

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformLinuxMySQLVMware

About the role

Key responsibilities & impact

Lead the information security team and manage people and projects
Lead the design, implementation, operation, and continual improvement of the Information Security Management System (ISMS)
Perform gap analyses based on NIST SP800-53 and other compliance frameworks; create mitigation and action plans
Determine applicability and apply information security and privacy requirements to ISMS policies
Prepare documentation supporting compliance frameworks such as FedRAMP and GovRAMP
Develop KPI metrics for performance measurement, continued compliance, and improvement
Create compliance project plans and manage implementation
Conduct risk and privacy impact assessments; prepare findings and implement risk treatment plans
Collaborate with operations teams to ensure controls are properly implemented and operated
Participate in and lead daily security operations; oversee security alerts and incidents
Lead vulnerability management, monitor remediation, and ensure timely patching
Manage internal and external audits, develop audit plans, and respond to audits and review requests
Liaise with external auditors and regulatory bodies

Requirements

What you’ll need

7+ years of experience in information security, including people and project management experience
Subject matter expertise in NIST SP800-53, ISO/IEC 27000, and SOC2 standards, regulations, and guidelines
Experience managing FedRAMP or GovRAMP implementation and compliance highly preferred
Knowledge of ISO/IEC 27001, NIST 800-53, NIST SP800-161, GovRAMP, FedRAMP, PCI DSS, SOX, HIPAA, GDPR, and SOC frameworks
Knowledge and experience with privacy frameworks and regulatory compliance requirements, including GDPR and CCPA
Strong network security knowledge
Working knowledge of access control, cryptography, vulnerability management, SIEM/log management, IDS/IPS, and penetration testing
Working knowledge and hardening skills for Linux, Windows, VMware, MySQL, and MSSQL
Working knowledge of AWS, Azure, GCP, cloud security, and network security
Experience with Fortinet products and services preferred
Strong verbal and written communication skills
Ability to work independently in a fast-paced, dynamic environment, establish priorities, and meet deadlines
Strong attention to detail and analytical abilities; able to gather and report data meaningfully
Ability to translate standards into practical business guidelines
Bachelor's degree in computer science, information security, or a related field
U.S. citizenship required
Must be authorized to work in the U.S. without sponsorship
Must work onsite at Fortinet headquarters in Sunnyvale, California

Benefits

Comp & perks

Medical, dental, vision, life and disability insurance
401(k)
11 paid holidays
Vacation time
Sick time
Comprehensive leave program
Equity program eligibility
Bonus eligibility reviewed at hire and annually at the company's discretion
Supportive work environment
Competitive Total Rewards package
Reasonable accommodations for qualified individuals with disabilities