Manager, DevSecOps

About the role

We are looking for a Manager, DevSecOps to lead a global engineering team that embeds security into Agile workstreams. The role will drive secure, reliable software delivery through CI/CD, cloud and platform engineering while ensuring compliance with ISO 27001, SOC 2 and other standards.

Key responsibilities

• Lead, mentor and develop a global DevSecOps team, handling hiring, performance management and succession planning.
• Embed DevSecOps engineers into Agile streams to support CI/CD, cloud, platform and application delivery.
• Facilitate collaboration across Development, Information Security, IT Operations, Architecture and Business teams.
• Promote shift‑left security, secure coding and automated security controls throughout the software lifecycle.
• Evaluate, implement and continuously improve security tooling such as SAST, DAST, vulnerability scanning, container security, secrets management and incident response solutions.
• Ensure compliance with ISO 27001, SOC 2, NIST and internal security standards; support audits and evidence collection.
• Manage operational, security and delivery risks, coordinate incident response and drive continuous improvement.
• Define and report DevSecOps metrics and KPIs to measure security posture and delivery effectiveness.

Required profile

• Bachelor’s degree in Computer Science, Information Security or related field.
• 12+ years of IT experience with at least 7 years in DevOps or security engineering.
• Minimum 4 years of people‑management experience.
• Relevant certifications such as CISSP, CISM, CompTIA Security+ or Certified DevSecOps Professional are highly desirable.

Required skills

• SAST and DAST tools
• Vulnerability scanning
• Container security
• Secrets management
• Threat detection and incident response tooling
• CI/CD pipeline automation
• Cloud platforms and platform engineering
• Knowledge of ISO 27001, SOC 2 and NIST frameworks