Security Manager

About This Role

This Security Manager role owns Opal's internal security program, encompassing security operations, compliance, vendor risk, incident response, and security tooling. It is a hands-on, security-first position for someone who can operate independently, work well with external partners, and keep a fast-moving startup secure without slowing it down. The role involves managing the security vendor and partnering closely with engineering, operations, and leadership, as well as overseeing IT operations through a managed service provider (MSP) to ensure security and compliance needs are met.

Responsibilities

• Own Opal's internal security program across people, systems, devices, vendors, and office environments
• Manage security tooling for endpoint protection, SSO, MFA, access reviews, logging, monitoring, and alerting
• Lead security incident response, including triage, investigation, remediation, communications, and follow-up
• Run internal access reviews and improve least-privilege practices across company systems
• Manage physical and digital access controls for the office and internal tools
• Drive SOC 2 compliance work, including control ownership, evidence collection, audit readiness, and auditor coordination
• Maintain security policies, procedures, exceptions, control documentation, and audit evidence
• Track security risks and drive practical remediation based on business impact
• Help turn security and compliance requirements into repeatable operating processes
• Own vendor security reviews as part of Opal's procurement process
• Manage ongoing third-party risk, including review cycles, evidence collection, and remediation follow-up
• Manage Opal's security vendor: set priorities, review deliverables, escalate issues, and hold them accountable
• Own bug bounty / vulnerability disclosure program operations, including intake, triage coordination, SLA tracking, and reporting
• Coordinate vulnerability remediation across security vendors, engineering, legal, and business stakeholders
• Manage Opal's IT MSP relationship and ensure IT execution supports security and compliance requirements
• Coordinate secure onboarding/offboarding across accounts, hardware, access, and device posture
• Hold the MSP accountable for device management, helpdesk, network support, and office infrastructure
• Oversee office network and A/V decisions, including UniFi networking with VLAN segmentation
• Evaluate whether MSP scope needs to change as Opal grows

Requirements

• 5+ years of experience in security operations, GRC, IT security, or a similar security-focused role
• Experience owning or materially driving a company security program