Senior Manager, Information Security & IT

Job Title: Senior Manager, Information Security & IT
Reports To: Chief Technology Officer
Department: Technology – Information Security & IT
Work Location: Irvine, CA or US-Remote
About Genea
As leaders in property technology, Genea provides cloud-based physical security, submeter billing and on-demand HVAC solutions to over 1 million users across 39 countries. But Genea is more than just a workplace. We're a mission-driven team that collaborates, innovates, and engineers the proptech solutions of tomorrow to solve the challenges of today. We pride ourselves on fostering an environment of teamwork, transparency and authenticity, where you can be yourself. But don't take our word for it. Genea has been recognized as a Top Workplace in 2021-2025, with a rating of 4.3 out of 5 stars on Glassdoor. Our team members love our competitive benefits, including 401k matching, PTO, 100% paid parental leave, remote work options, and development/training opportunities.
Job Overview
Genea is looking for a hands-on Senior Manager, Information Security & IT to lead and continuously improve our cybersecurity and corporate IT programs.
Reporting to the CTO, this role will lead Genea's cybersecurity and IT programs across compliance, cloud and application security, incident response, identity and access management, and corporate IT.
Genea is already SOC 2 Type 2 compliant. This role will be responsible for continuously maintaining and maturing that program while helping drive additional cybersecurity and compliance initiatives, including ISO 27001 and other relevant frameworks as the business evolves.
We are looking for a cybersecurity leader who embraces AI, understands the evolving risks introduced by AI and agentic technologies, and can help Genea adopt AI securely while leveraging AI and automation to strengthen cybersecurity operations.
This is a hands-on leadership role for someone who can set direction, build scalable programs, lead the IT team and build out the cybersecurity function as needed, work closely with Engineering and other business teams, and remain involved in execution where needed.
Duties and Responsibilities
Cybersecurity Compliance & Programs
Own and continuously mature Genea's cybersecurity compliance program, including SOC 2 Type 2, policies, controls, audit readiness, evidence management, risk assessments, cybersecurity awareness, and readiness for ISO 27001 and other relevant frameworks.
Establish practical governance and guardrails for secure enterprise adoption of AI, including approved AI technologies, data protection, third-party AI risk, responsible usage, and emerging AI cybersecurity requirements.
Establish measurable cybersecurity KPIs, KRIs, risk reporting, and provide regular program updates to the executive team.
Cloud & Application Security
Drive Genea's cloud and application security program in close partnership with Engineering, DevOps, Platform, and Product teams, including secure-by-design practices for traditional applications as well as AI and GenAI capabilities.
Strengthen cybersecurity across AWS and Azure, including IAM roles and permissions, least privilege, network controls, secrets management, encryption, logging, secure configurations, infrastructure hardening, and secure access to AI models, agents, APIs, and data.
Mature secure SDLC and DevSecOps practices, including threat modeling, architecture reviews, SAST/DAST, dependency and container scanning, software supply-chain security, and controls for emerging AI risks such as prompt injection and excessive agent permissions.
Own vulnerability management and coordinate internal and external penetration testing, prioritizing findings and driving remediation with Engineering.