Information Security Manager

Job Description
Cricut is looking for a creative, hardworking, self-motivated person to join our IT team as an Information Security Manager. Cricut is growing quickly and we are looking for someone that has demonstrated the ability to maintain and improve our comprehensive IT Security Program. We are looking for someone who is tech-savvy as well as personable. In this role, you will work alongside IT and software engineering to build and manage the programs supporting our existing compliance control activities and initiatives and make security and privacy an integral part of our processes and culture. You will be customer facing and help our customers with any IT security requests. You’ll monitor security infrastructure and respond to incidents and alerts.
Responsibilities:
Manage all internal and external security compliance engagement activities.
You will build and manage the programs supporting our existing compliance control activities and initiatives.
Work very closely with many cross-functional teams to communicate and integrate control requirements (IT, SoftDev, HR, Finance, Legal, others, etc.).
Engage directly with Product Engineering through all phases of product design, implementation and ongoing maintenance of security compliance activities.
Manage and communicate compliance requirements, timelines, and roadmap to supporting teams and leadership.
Drive project activities to ensure requirements and schedules are met.
Identify and manage risks and work with project teams to identify appropriate solutions.
Manage, track and report compliance-related remediation to project teams and management.
Develop metrics and reporting to demonstrate compliance status and engagement.
Communicate the compliance posture and effectiveness to management on a scheduled basis.
Provide ongoing guidance and consultation to the organization to promote a progressive and sustainable Security Compliance Engagement Program.
Develop and work with supporting teams to design and implement an automated control strategy and exception reporting process.
Develop a strategy to implement and maintain a centralized audit evidence repository to support all security compliance evidence gathering and maintenance activities.
Integrate ongoing changes to laws, regulations, and frameworks as required into daily activities