Senior Manager, Platform Security

JOB DESCRIPTION:

We are seeking a seasoned and visionary Senior Manager of Global Security to lead a high-performing, internationally distributed team spanning four critical domains: AI Security, Cloud Security, Data Security, and Application Security. Reporting to the CISO, this leader will be instrumental in shaping and executing the organization's security strategy across all layers of our technology stack, driving a culture of security-first thinking across the enterprise.

Key Responsibilities 

Global Team Leadership 

• Lead, mentor, and grow a globally distributed security team across AI, cloud, data, and application security disciplines.
• Establish clear objectives, KPIs, and performance frameworks aligned to organizational security goals.
• Foster a collaborative, inclusive team culture across time zones and geographies.
• Manage team capacity planning, hiring, and succession across multiple functional areas.

AI Security 

• Define and enforce AI security guardrails across the organization's AI/ML initiatives and third-party AI integrations.
• Develop governance frameworks for responsible AI use, model security, and prompt injection prevention.
• Partner with data science and engineering teams to embed security into the AI/ML lifecycle from design to deployment.
• Monitor emerging threats specific to AI systems, LLMs, and agentic AI pipelines.

Cloud Security 

• Oversee Cloud Security Posture Management (CSPM) tooling and processes to ensure continuous compliance and risk visibility across cloud environments (AWS, Azure, GCP).
• Drive cloud-native security architecture, including IAM, network segmentation, secrets management, and workload protection.
• Partner with DevOps and platform engineering on security-as-code initiatives and infrastructure hardening.

Data Security

• Lead the Data Security Posture Management (DSPM) program, ensuring sensitive data is discovered, classified, and protected across structured and unstructured environments. 
• Define and enforce data loss prevention (DLP), encryption, and access governance policies.
• Ensure compliance with global data privacy regulations (GDPR, CCPA, DORA etc.) in collaboration with legal and privacy teams.

Application Security

• Oversee the full application security program including SAST, DAST, SCA, and secure code review processes.
• Drive adoption of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tooling across the SDLC.
• Manage and optimize Akamai WAF policies to protect web-facing applications against OWASP Top 10 and advanced threats.
• Collaborate with engineering and product teams to embed AppSec practices in CI/CD pipelines.
• Drive a vulnerability management program with clear SLAs for remediation across severity levels.

Strategy & Stakeholder Engagement 

• Develop and present security roadmaps, risk posture reports, and investment recommendations to senior leadership.
• Build strong relationships with cross-functional stakeholders including Engineering, Legal, Compliance, and Product.
• Represent the security function in board-level and executive risk discussions as required.
• Stay current on the threat landscape, emerging technologies, and regulatory changes. 

Required Qualifications

• 10+ years of progressive experience in information security, with at least 4 years in a people management or senior leadership role.
• Proven track record leading global, cross-functional security teams across multiple disciplines.
• Hands-on experience with SAST and DAST tools (e.g., Checkmarx, Veracode, Snyk, Burp Suite, OWASP ZAP).
• Deep familiarity with Akamai WAF configuration, policy management, and threat analytics.
• Experience with CSPM solutions (e.g., Wiz, Microsoft Defender for Cloud).
• Experience with DSPM platforms (e.g., BigID, Cyera, Normalyze).
• Strong understanding of AI/ML security risks, guardrail frameworks, and responsible AI governance.
• Solid knowledge of cloud security principles across major cloud providers (AWS, Azure, GCP).
• Experience with regulatory frameworks: GDPR, CCPA, SOC 2, ISO 27001, NIST CSF.
• Demonstrated ability to influence at the executive and board level.
• Excellent communication, organizational, and stakeholder management skills. 

Preferred Qualifications

• Relevant security certifications: CISSP, CISM, CCSP, AWS Security Specialty, or equivalent.
• Experience in highly regulated industries (finance, healthcare, or technology at scale).
• Familiarity with LLM security frameworks, OWASP LLM Top 10, and AI red-teaming methodologies.
• Prior experience building security programs from an early-stage or transformation phase.
• Background in threat modeling, penetration testing, or security architecture.