Sr. Manager - Information Security

Job Req ID: 30515

About Supermicro:

Supermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are amongst the fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer many new positions to the technology community.  We seek talented, passionate, and committed engineers, technologists, and business leaders to join us to drive accelerated growth and technology-led innovation in the global marketplace.

Job Summary:

The Senior Manager, Information Security Operations is responsible for leading the organization's Information Security Management System (ISMS), security operations, governance, risk management, compliance, incident response, and supply chain security programs. This role provides strategic and operational leadership to ensure the confidentiality, integrity, and availability of corporate information assets while maintaining compliance with ISO/IEC 27001, ISO 28000/28001, NIST, regulatory requirements, and customer security obligations.

The position works closely with executive leadership, IT, Legal, Human Resources, Operations, Manufacturing, Supply Chain, and external auditors to drive continuous improvement of the organization's security posture and resilience. Responsibilities commonly include incident response management, audit preparedness, security engineering oversight, security questionnaires, and compliance activities.

Essential Duties and Responsibilities:

Information Security Program Management
•    Lead and manage the Information Security Operations team.
•    Develop and execute the organization's information security strategy and roadmap.
•    Establish security policies, standards, procedures, and guidelines.
•    Monitor and improve overall security maturity and effectiveness.
•    Provide executive reporting and security metrics to senior leadership.

ISO 27001 ISMS Management
•    Maintain and continually improve the Information Security Management System (ISMS).
•    Manage ISO 27001 certification activities, surveillance audits, and recertification audits.
•    Conduct risk assessments and oversee risk treatment plans.
•    Ensure compliance with ISO 27001 controls and applicable regulations.
•    Coordinate internal audits, management reviews, and corrective action programs.

ISO 28000 / ISO 28001 Supply Chain Security
•    Lead implementation and maintenance of supply chain security programs.
•    Support ISO 28000/28001 certification and customer security requirements.
•    Conduct contract manufacturer and supplier security assessments.
•    Oversee supply chain risk management and remediation activities.
•    Collaborate with procurement, logistics, warehousing, and manufacturing teams to improve security controls.

Security Operations
•    Oversee Security Operations Center (SOC) activities and monitoring.
•    Manage security incident response, investigations, and recovery efforts.
•    Coordinate cyber incident handling with internal stakeholders and external partners.
•    Lead threat management, vulnerability management, and remediation programs.
•    Ensure effective security monitoring, logging, and detection capabilities.

Governance, Risk, and Compliance (GRC)
•    Manage enterprise risk assessments and security reviews.
•    Oversee third-party and vendor security risk management.
•    Support customer security assessments and questionnaires.
•    Ensure compliance with applicable regulatory, contractual, and security requirements.
•    Maintain security policies and procedures and promote organizational compliance.

Security Awareness and Training
•    Develop and maintain security awareness programs.
•    Conduct phishing simulations and user training initiatives.
•    Promote a strong security culture throughout the organization.

Business Continuity and Resilience
•    Support business continuity and disaster recovery planning.
•    Participate in continuity testing and crisis management exercises.
•    Ensure security requirements are integrated into continuity planning.

Leadership and Team Development
•    Lead, mentor, and develop security professionals.
•    Manage project prioritization, resource allocation, and budgeting.
•    Foster collaboration across business units and global locations.

Qualifications:

• 8+ years of information security experience.
• 3-5+ years of management or leadership experience.
• Hands-on experience with ISO 27001 implementation, certification, and audits.
• Experience with ISO 28000/28001, C-TPAT, or supply chain security programs.
• Experience in incident response, vulnerability management, risk management, and compliance.
• Experience supporting global manufacturing, logistics, or technology environments preferred.
• ISO 27001 Lead Implementer.
• ISO 27001 Lead Auditor.

EEO Statement

Supermicro is an Equal Opportunity Employer and embraces diversity in our employee population. It is the policy of Supermicro to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or special disabled veteran, marital status, pregnancy, genetic information, or any other legally protected status.