Security Solutions Senior Manager

Who we are:

Tinuiti is the largest independent performance marketing firm across Streaming TV, Google, Meta, and Amazon, with almost $4 billion in digital media under management and over 1,200 employees. With industry-leading expertise in search, social, Amazon and marketplaces, addressable TV, mobile apps, Influencer, Lifecycle, and more, Tinuiti understands that success requires both strategy and channel expertise. Our goal when we come to work every day is simple - to grow happiness. For our clients, their customers, our people and our partners. Growing happiness guides everything we do and our core values - Unleash Greatness, Never Stop Learning, Ignite Your Passion, Thankful Living, and Inspire Innovation & Change - inspire us to maintain a culture where our people take pride in their work and have fun doing it.

We support 100% remote work for applicants who reside in the United States.

What you’ll be doing:

As our Senior Manager of Security Solutions, you’ll be the technical security lead within Tinuiti’s Technology Solutions Group (TSG), overseeing enterprise, cloud, and product security programs while managing security vendors and partnerships, including our MSSP. Your role involves driving the execution of the security program, managing daily operations, closing alerts, conducting investigations, and ensuring the security of our cloud environments. You’ll collaborate with various departments to integrate security into their processes, translate technical requirements for non-technical staff, and develop innovative solutions tailored to our dynamic, non-traditional environment. Reporting to the Director of Technology & Security, and working alongside the Manager of Identity & Access Management, you’ll help synchronize efforts across security operations, compliance, and IAM, fostering a culture of heightened security awareness. You have deep AWS security expertise, adept at communicating complex concepts, creatively solving security challenges, and continuously learning to stay ahead of emerging threats, all while balancing robust security with operational efficiency.

• Lead and manage day-to-day security operations, ensuring the effectiveness of security controls.

• Oversee and collaborate with the Managed Security Service Provider (MSSP) to ensure security threats are being discovered and investigated.

• Serve as the AWS security expert, ensuring the security and compliance of our cloud infrastructure.

• Drive the execution of the security program, including monitoring, alert management, and continuous improvement efforts.

• Lead incident response efforts, including triage, investigation, and resolution.

• Conduct incident response tabletop exercises, taking a creative and innovative approach to incorporate threats surrounding the marketing & advertising industries.

• Collaborate with various departments to integrate security measures into their processes and tools.

• Collaborate with the privacy & GRC department to help build a robust risk management program.

• Communicate and report regularly to the Director of Technology & Security on security operations, risks, and incidents.

• Develop and implement creative security solutions tailored to a fast-paced, marketing-focused environment.

• Stay current with the latest security trends, threats, and technologies, and proactively adopt new tools and methodologies.

• Conduct supply chain security review of vendors seeking access to Tinuiti’s sensitive information.

• Assist the Director of Technology & Security in vetting new security technologies to integrate into the TSG’s security stack.

• Conduct security assessments, vulnerability scans, and audits to identify vulnerabilities in the organization's systems, networks, and products.

• Collaborate with other teams across the TSG to develop and maintain technical security controls.

• Monitor security systems and networks to identify and respond to potential security threats and vulnerabilities.

• Manage security partner relationships.

• Help manage the budget for Information Security function - monitoring, reporting, mitigating, remediating

• Help foster a security-first mindset to Tinuiti’s performance marketing teams.

We’d love to hear from you if:

Research shows that while men apply to jobs when they meet an average of 60% of the criteria, women and other marginalized folks tend to only apply when they check every box. So if you think you qualify, but don't necessarily meet every single point on the job description, please still get in touch.

Requirements:

• 5-8 years of experience in information security, with a strong emphasis on security operations, program management, and AWS security.

• Demonstrated success in managing security platforms, closing alerts, and leading security investigations.v

• Demonstrated experience showcasing a partnership-first approach with other departments, vendors, and team members while deploying security solutions.

• Documented experience in architecting, implementing, and enhancing sophisticated security frameworks within dynamic, preferably performance marketing, environments.

• Practical exposure to contemporary security technologies, including advanced threat detection, mitigation tools, and real-time monitoring systems.

• Knowledge of SSAE18 / SOC2, ISO 27001, HIPAA, HITRUST, and other cyber security standards.

• Up-to-date knowledge of methodologies and trends in both business and IT.

• Specific experience with SOC2 security & bringing companies to be compliant with standards is required.

• Previous experience in technical writing and documentation.

• Experience translating external compliance regulations and defining internal business requirements is a plus

• Experience with a broad array of IT technologies including cloud and SaaS services (Google/AWS/JumpCloud), Meraki, File transfer protocols, Device management.

• Operational and technical experience within Tinuiti’s security tools, including but not limited to SentinelOne, cloud security tools (such as Wiz, Orca, and Lacework), and Varonis DatAdvantage.

• Experience with data classification, access control, and security models.

• Experience with implementing and managing DLP, privileged access and identity management, password management, GRC, and ERM tools.

• Experience with various authentication protocols and encryption algorithms.

• High degree of initiative, dependability, and ability to work with little supervision while being resilient to change

• Proficient understanding of the unique challenges in the performance marketing sector is a plus.

• Advanced security certifications (CISSP, CISM) are a plus.

FLSA Classification: Exempt

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Benefits:

• Unlimited PTO: At Tinuiti, we believe you deserve time to rest and enjoy life unplugged from your devices. When you take time for yourselves, you’re able to bring your best self to work. That’s why we prioritize flexibility, a fully remote environment, and offer unlimited paid time off. On top of that, we have 17 paid holidays and company-wide shutdowns, fittingly named Owning Our Offline (OOO), to give us all a chance to collectively log-off and step away from our desks together. Above industry standard work-life balance is something we’re proud of, and it’s one our most loved benefits from Tinuitians year-over-year.

• Holidays: We offer 17 paid holidays, if one of your religious holidays is not covered, please by all means take advantage of your Flex PTO!

• Flex Fridays: Meetings are minimized and all Tinuitians have the option to start their weekend early at 1pm local time.

• Owning Our Offline: Clients are informed and all offices will be closed for 3 total weeks throughout the year to give everyone the chance to truly unplug.

Healthcare: Medical, Dental, Vision, Life & Disability, Flex Spending Accounts

Retirement: Match up to 4% of your contributions at 100% with immediate vesting

Perks and Wellness: Fringe, Forma, Thankful giving, Equity

Learning and Development: Mentor program and more

Compensation: 

The annual base salary range for this role’s listed level is currently $120,000 - $130,000 plus performance bonus of up to 8%. 

Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, and alignment with market data. We will provide more information on our benefits and equity upon requests. Sales roles are also eligible for incentive pay targeted up to or over 100% of the offered base salary (no cap).  Disclosure as required by the Colorado Equal Pay for > Equal Work Act, C.R.S. § 8-5-101 et seq. 

Disclaimer: This description has been designed to indicate the general nature and level of work performed by employees within this position. The actual duties, responsibilities, and qualifications may vary based on assignment or group. Tinuiti is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, gender, sexual orientation, gender identity or expression, religion, national origin, marital status, age, disability, veteran status, genetic information, or any other protected status.