Senior Manager, Operations Strategy, Information Security

As Senior Manager, Operations Strategy, Information Security, you'll serve as a strategic and operational partner to the CISO and INFOSEC leadership team, building the planning processes, operating rhythms, reporting mechanisms, and cross-functional programs that help INFOSEC prioritize effectively, manage risk, and improve security maturity. You'll translate complex technical and risk topics into clear decisions and actionable plans for Security Engineering, IT, Engineering, GRC, Legal, and executive stakeholders. You'll establish scalable mechanisms for planning, performance management, knowledge sharing, change management, incident learning, and operational improvement, while building, managing, coaching, and growing a team of Technical Program Managers. You'll work from our San Francisco office three days a week.

Responsibilities

Serve as a strategic and operational partner to the CISO and INFOSEC leadership team; Build and run annual and quarterly planning processes for INFOSEC and IT; Coordinate and run QBRs and other operating reviews for INFOSEC and IT; Implement tracking and reporting for INFOSEC OKRs, key risk indicators, maturity metrics, and operational health measures; Design, document, and continuously improve INFOSEC operating processes covering alert investigations, service requests, incident management, policy updates, and other core workflows; Build and maintain a high-quality INFOSEC knowledge base; Manage complex, cross-functional security and IT programs from strategy through execution; Establish change-management practices for adopting new security policies, processes, tools, and operating models; Develop dashboards, decision-support mechanisms, and automated workflows; Lead post-incident reviews and operational improvement initiatives; Build, manage, coach, and develop a team of Technical Program Managers

Requirements

Bachelor's degree or equivalent experience; 8+ years of experience in strategy and operations, business operations, technical program management, security programs, or a related field; Experience owning complex, cross-functional programs end to end, including planning, dependency mapping, stakeholder alignment, execution tracking, risk management, and executive reporting; Strong analytical and problem-solving skills; Exceptional written, verbal, and presentation skills; Demonstrated experience designing operating rhythms and performance-management mechanisms such as annual planning, quarterly planning, OKRs, KPIs, QBRs, risk reviews, or executive dashboards; Experience leading, coaching, or developing program managers or other operational professionals; Strong ownership and self-direction

Nice to have

Experience serving as chief of staff to a CISO, CTO, senior security leader, or comparable technology executive, or leading strategy and operations within an INFOSEC organization; Experience with information security, technology risk, governance, compliance, incident management, operational resilience, or security maturity programs; Familiarity with security operating models and workflows spanning security engineering, corporate IT, GRC, risk management, identity and access management, endpoint security, vulnerability management, or incident response; Experience translating regulatory, audit, privacy, or risk requirements into practical policies, processes, controls, and operating mechanisms in a financial services or payments environment; Experience building automation-first operating processes, knowledge-management systems, or AI-assisted workflows; Comfort operating in a high-growth environment with high standards, rapid iteration cycles, evolving priorities, and significant ambiguity; Alignment with Airwallex INFOSEC competencies, including grit, critical thinking, curiosity, impact orientation, and ownership