Hiring: Information Security Manager Company: Sotheby's Location: Portland, OR Job Posted Time: 2026-09-16 11:20:59 Target Skills & Keywords : Risk Management, SOC 2, SaaS About the job Required Skills: •You obsess over getting the key facts nailed down. You have an attention to detail that some might call "extreme". And you recognize the daunting challenge of managing information security at a historic and globally recognized brand, but that challenge excites you. •Interface directly with IT and business unit managers to drive security initiatives to completion •Lead business continuity and disaster recovery planning and preparation projects •Lead internal and external security audits, acting as the primary point of contact for auditors •Draft, update, and enforce information security policies, processes, and standards •Conduct third-party vendor risk assessments and internal security risk assessments •Maintain risk registers, compliance dashboards, and reports for senior leadership •Audit internal systems to verify compliance with mandatory security controls Qualifications: •At least five years of hands-on experience in information security roles •Bachelor's or Master's in computer science, engineering, or cybersecurity •Comprehensive expertise in information security fundamentals •Proven ability to manage complex projects from conception to completion •Demonstrated capacity to explain complex technical risks in simple, business-friendly language •Demonstrated capacity to communicate clearly, precisely, and concisely •At least one active credential, such as CISA, CRISC, CISM, or CISSP •Deep knowledge of frameworks and standards such as CIS, ISO 27001, and NIST •For the UK, Hong Kong, France and Switzerland, please Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!