Senior Manager, IT Security

Salary: $166K - $207K Location Type: Remote Employment Type: Full-Time

Position Overview

Dandy is seeking a dynamic and experienced Senior Manager, IT Security to establish, lead, and grow our IT security functions. Reporting directly to the Director, IT, this role will own the strategy, execution, and continuous improvement of Dandy’s cybersecurity program. You’ll be responsible for building our incident response capabilities, implementing best-in-class security technologies, conducting tabletop exercises, and partnering with our IT, Product, and Engineering teams to embed security into everything we build. This is a high-impact role for a hands-on, strategic leader who thrives in a fast-paced environment and is passionate about building a security-first culture from the ground up.

Responsibilities

Build & Shape the IT Security Function

• Define the vision, structure, and roadmap for our IT security program.
• Establish policies, processes, and growth paths as the function scales.

Lead Security Incident Response

• Own our Security Incident Response Policy and Process, leading real-time incident response for threats like malware, phishing, or data breaches.
• Establish clear RACI models and success metrics for containment and recovery.

Drive Tabletop Exercises

• Design and facilitate tabletop exercises to prepare cross-functional teams (IT, Product, Engineering, Legal) for cyber threats, fostering corporate readiness and iterative improvements.

Implement Cybersecurity Technologies

• Evaluate and deploy scalable cybersecurity tools (e.g., SIEM, EDR, MFA, firewalls) to protect our infrastructure.
• Stay ahead of emerging threats and recommend cost-effective solutions.

Partner with Application Security Teams

• Collaborate with Product and Engineering to embed security into the software development lifecycle (e.g., DevSecOps, secure coding).
• Support vulnerability management and application security best practices.

Foster a Security-First Culture

• Advocate for security awareness across the organization through training, policies, and cross-functional collaboration.
• Translate complex security concepts into actionable insights for non-technical stakeholders.

Optimize Processes & Metrics

• Establish best practices for incident response, system security, and data protection.
• Define KPIs to measure program effectiveness and report progress to leadership.

Requirements

Leadership Experience

• 3+ years in a leadership role within IT security, with a proven track record of building programs and delivering outcomes in fast-paced, growth environments.

Proven Security Expertise

• 7+ years of experience in IT security, with deep knowledge of incident response, cybersecurity tools (e.g., Splunk, CrowdStrike, Palo Alto Networks), and processes like threat detection, containment, and recovery.

Hands-On Technical Skills

• Significant experience implementing and managing cybersecurity technologies (e.g., SIEM, EDR, MFA).
• Understanding of SAST/DAST and security principles across Windows, macOS, Linux, GCP, and Azure environments is a must.

Collaborative Leadership

• Strong communicator capable of working with IT, Product, Engineering, and executive stakeholders to align security initiatives with business goals.
• Ability to simplify complex security issues for diverse audiences.

Strategic Thinking & Execution

• You can define a long-term security vision while executing tactical initiatives, balancing hands-on work with strategic planning.

Company Information

Dandy is transforming the massive and antiquated dental industry—an industry worth over $200B. Backed by some of the world’s leading venture capital firms, we’re on an ambitious mission to simplify and modernize every function of the dental practice through technology. As we expand our reach globally, Dandy is building the operating system for dental offices around the world—empowering clinicians and their teams with technology, innovation, and world-class support to achieve more for their practices, their people, and their patients.