Robert Half is hiring an Information Security Manager for our client in Southern Wisconsin. This role will own and advance their enterprise cybersecurity program. This role blends strategy, governance, and operational leadership, with a strong emphasis on risk management and compliance.

You’ll serve as the primary driver of security maturity across the organization. You're setting direction, managing risk, guiding audits, and ensuring security is embedded into systems, projects, and everyday operations.

What You’ll Do:

• Own the organization’s information security program, including policies, controls, and risk framework
• Lead cybersecurity governance and compliance efforts across industry-standard frameworks
• Manage the security risk register and present mitigation strategies to leadership
• Oversee day-to-day security operations performed by IT staff (monitoring, vulnerability management, control implementation)
• Plan and execute annual security roadmaps and improvement initiatives
• Coordinate internal and external audits and maintain audit readiness
• Act as senior lead for security incidents, including escalation, communication, and post-incident reviews
• Ensure security requirements are incorporated into IT systems, cloud platforms, and major technology initiatives
• Provide guidance on high-risk or critical operational systems when security involvement is required
• Lead vendor security assessments and ongoing third-party risk monitoring
• Respond to customer security inquiries and contractual cybersecurity requirements
• Deliver executive-level reporting on security posture, risks, and program progress
• Oversee security awareness training and promote a strong security culture across the workforce

Required:

• 7+ years of experience in information security, cybersecurity, risk management, or GRC
• Hands-on experience with recognized security frameworks (such as NIST or ISO)
• Strong understanding of enterprise infrastructure including networks, systems, cloud environments, and identity management
• Proven experience managing audits, assessments, or governance programs
• Ability to clearly communicate technical risk to business stakeholders

Education & Certifications:

• Bachelor’s degree in Information Security, Computer Science, IT, Engineering, or related field (or equivalent experience)
• Preferred certifications: CISSP, CISM, CISA, CRISC, Security+, or ISO 27001 Lead Implementer/Auditor