Senior Manager, Operations Strategy, Information Security

About the role

Airwallex, the AI-native financial operating system used by more than 675,000 businesses, is hiring a Senior Manager, Operations Strategy, Information Security. You will act as a strategic and operational partner to the CISO and INFOSEC leadership team, building planning processes, operating rhythms, reporting mechanisms and cross-functional programs that help INFOSEC prioritize, manage risk and improve security maturity. You will also build, manage, coach and grow a team of Technical Program Managers. The role is based in the San Francisco office three days a week.

Key responsibilities

• Build and run annual and quarterly planning processes for INFOSEC and IT, including roadmaps, prioritization, resource planning and risk assessments.
• Coordinate QBRs and operating reviews, and implement tracking and reporting for INFOSEC OKRs, key risk indicators, maturity metrics and operational health.
• Design, document and improve INFOSEC operating processes such as alert investigations, service requests, incident management and policy updates.
• Maintain a high-quality INFOSEC knowledge base and build dashboards, decision-support mechanisms and automated workflows.
• Manage complex, cross-functional security and IT programs from strategy through execution, and set up change-management practices.
• Lead post-incident reviews and operational improvement initiatives.
• Build, manage, coach and develop a team of Technical Program Managers.

Required profile

• Bachelor's degree or equivalent experience; a top-tier university background is preferred.
• 8+ years of experience in strategy and operations, business operations, technical program management, security programs or a related field, preferably in a high-growth technology, fintech, payments or regulated environment.
• Experience owning complex, cross-functional programs end to end, including planning, dependency mapping, stakeholder alignment, execution tracking, risk management and executive reporting.
• Preferred: experience as chief of staff to a CISO, CTO or senior security leader, or leading strategy and operations within an INFOSEC organization.
• Preferred: experience with information security, technology risk, governance, compliance, incident management, operational resilience or security maturity programs.

Required skills

• Strong analytical and problem-solving skills, and the ability to explain complex technical or risk topics to non-technical executives.
• Demonstrated experience designing operating rhythms and performance-management mechanisms such as annual planning, quarterly planning, OKRs, KPIs, QBRs and executive dashboards.
• Experience leading, coaching or developing program managers or other operational professionals.
• Preferred: familiarity with security operating models and workflows (security engineering, GRC, IAM, endpoint security, vulnerability management, incident response).
• Preferred: experience turning regulatory, audit, privacy or risk requirements into policies, processes and controls in a financial services or payments environment.