42dot Information Security Manager at 42dot leading security operations and safeguarding National Core Technology and key information assets. Responsibilities include security governance, compliance, infrastructure monitoring, and security training.
Responsibilities
The Information Security Manager will lead security operations at our Silicon Valley (SV) office, playing a critical role in safeguarding National Core Technology (NCT) and key information assets. You will operate security controls across networks, endpoints, cloud, and development environments, while establishing a cohesive global information security framework in close collaboration with Korea HQ.
Security Governance & Compliance: Operate corporate information security governance and manage the acquisition and maintenance of security certifications (e.g., ISO 27001).
NCT Asset Protection & Audit: Continuously monitor and enforce security measures for development assets, and manage responses to National Security Audits conducted by relevant government agencies.
Infrastructure Monitoring: Conduct active, continuous security monitoring across actual technical environments, including networks, servers, endpoints, and cloud infrastructure.
Policy Localization: Support the application of security policies and manage exception approvals tailored to the local development and operational environment in the U.S.
Physical & IT Security Alignment: Collaborate with Physical Security personnel to review access rights for critical facilities and spaces, ensuring integrated protective measures between physical and IT security.
Awareness & Training: Conduct regular security training sessions for SV office employees and manage security pledges.
Qualification
Interview Process
Required
5+ years of hands-on experience in relevant fields such as Information Security, Cybersecurity, Network Security, or System Security.
Proven experience directly configuring network security equipment and troubleshooting issues.
Hands-on experience configuring and operating endpoint access controls, account management, and authorization policies.
Experience in conducting infrastructure vulnerability assessments and remediating security flaws.
Experience in Security Event analysis or Incident Response.
Preferred
Excellent communication skills with the ability to balance strict security protocols with developer productivity.
Experience building or operating Enterprise Security environments (e.g., SIEM, EDR, IAM).
Experience operating security functions within a global or multinational organization.
