Senior Manager of Security

We are seeking a hands-on Senior Manager of Security to create, lead and manage our organization’s cybersecurity and enterprise security program. This role is responsible for protecting digital assets, intellectual property, and critical infrastructure while enabling business growth and innovation. The ideal candidate combines deep technical expertise with leadership, ensuring security is embedded across systems, processes, and culture.

Key Responsibilities:

Cybersecurity Leadership

• Create and manager a comprehensive cybersecurity strategy aligned with business objectives
• Lead enterprise-wide security architecture, including network, cloud, application, and endpoint security
• Oversee Security Operations (SOC), incident detection, response, and threat intelligence
• Establish and maintain a proactive vulnerability management and penetration testing program
• Drive zero-trust architecture and secure-by-design principles

Risk Management & Compliance

• Identify, assess, and mitigate cybersecurity risks across the organization
• Ensure compliance with frameworks such as NIST SP 800-171, ISO 27001, SOC 2 (System Organization Controls 2), CMMC (Cybersecurity Maturity Model Certification), and GDPR (General Data Protection Regulation; as applicable)

• Lead internal and external security audits and certifications
• Develop and maintain policies, standards, and procedures

Incident Response & Resilience

• Own the incident response lifecycle, including detection, preparation, containment, eradication, and recovery
• Lead crisis management for cybersecurity incidents and coordinate cross-functional response
• Conduct tabletop exercises and continuously improve response readiness

Security Engineering & Operations

• Manage the implementation and optimization of security tools (SIEM, EDR, IAM, DLP, etc.)
• Partner with IT, DevOps, and Engineering to embed security into infrastructure and software development lifecycles (DevSecOps); minimize development cycles through continuous integration, continuous delivery (CI/CD)
• Manage third-party security risks and supplier assessments

Leadership & Culture

• Promote a culture of security awareness across the organization

• This position requires access to export-controlled information. Employment is contingent upon the applicant being a U.S. person as defined by 8 U.S.C. § 1324b(a)(3).

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field
• 10+ years of experience in cybersecurity or information security roles
• Industry certifications such as CISSP, CISM, CISA, or CCSP
• Deep expertise in areas such as cloud security, network security, identity management, and threat detection
• Strong knowledge of regulatory and compliance frameworks (e.g., NIST, ISO, SOC 2)
• Experience leading incident response and security operations

Preferred

• Master’s degree or MBA
• Experience in high-growth or regulated industries (e.g., fintech, healthcare, defense, or deep tech)
• Familiarity with zero-trust architectures and modern security frameworks
• Experience with the unique challenges of DCSA compliance and audit preparation within a fast-paced technology startup

Startup Mindset:

• You're creative, flexible, and eager to wear multiple hats.
• You're passionate about building systems from the ground up and comfortable with ambiguity and change.

The expected annual salary range for this position is $165,000-$215,000.

As a full-time employee, you will be eligible for Monarch’s comprehensive benefits package, which includes:

• Medical, Dental, and Vision insurance
• Fidelity 401(k) plan with 4% employer matching
• 20 paid time off (PTO) days per year
• 13 paid company holidays
• 9/80 work schedule (every other Friday off)

Monarch Quantum is proud to be an equal opportunity employer and does not discriminate on the basis of race, color, citizenship status, national origin, ancestry, sex, sexual orientation, age, religion, creed, physical or mental disability, medical condition, marital status, veteran status or any other characteristics protected under applicable federal, state and local laws.