Manager of Cloud Security

• FairSquare | Individual Contributor | Reports to: CISO
• Location: Atlanta, GA (Cumberland/Galleria, near Truist Park)
• Hybrid Schedule: Full Time, Monday-Friday, 2-days onsite/3-days remote
• Exempt/Salary Range: $139K-258K. Position eligible for additional incentives including bonus, 401(k) match, health and welfare benefits, amazing culture, growth opportunity and more!!

Reporting Structure

This position reports directly to the Chief Information Security Officer (CISO). While this is an individual contributor role with no direct reports, the position will interact closely and collaborate regularly with the Director of IT and the Director of Information Security to align cloud security remediation efforts with broader IT operations and security program priorities.

About the Role

FairSquare is seeking an experienced Manager of Cloud Security to serve as an individual contributor (non-people-management) responsible for the security posture of our AWS cloud environment. This role owns the operationalization of our cloud security tooling - with primary emphasis on the Wiz platform - and drives remediation of findings across audits, penetration tests, and vulnerability assessments. This is a hands-on technical leadership role for someone who wants deep ownership of cloud security outcomes without direct reports.

What You'll Do

Cloud Security Platform Ownership (Wiz / AWS)
• Serve as the primary administrator and subject matter expert for the Wiz security platform, including configuration, policy tuning, integrations, and connector health across our AWS accounts and organization structure
• Continuously monitor Wiz findings (CSPM, vulnerability, IAM/entitlement, container, and data security modules) and translate raw findings into prioritized, actionable remediation work
• Develop and maintain custom Wiz rules, risk scoring adjustments, and dashboards tailored to FairSquare's AWS environment and risk tolerance
• Partner with cloud engineering teams to ensure Wiz coverage extends to new AWS accounts, services, and workloads as the environment grows
• Evaluate and recommend enhancements to Wiz configuration to reduce noise, close coverage gaps, and improve signal-to-action time

Remediation & Corrective Action Management
• Own the end-to-end lifecycle of remediating findings surfaced through Wiz, internal/external audits, penetration testing engagements, and vulnerability scanning programs
• Triage and prioritize findings based on exploitability, business impact, and compliance relevance
• Build corrective action plans (CAPs) with clear ownership, timelines, and validation steps; track them to closure
• Work directly with engineering, DevOps, and infrastructure teams to implement remediations - including IAM policy hardening, misconfiguration fixes, patching coordination, and architecture adjustments
• Validate remediation effectiveness through re-scanning, evidence collection, and control retesting
• Maintain remediation metrics (MTTR, aging findings, recurrence rates) and report trends to the CISO and relevant stakeholders

AWS Cloud Security
• Assess and improve the security configuration of AWS services (IAM, VPC, S3, EC2, KMS, Lambda, ECS/EKS, RDS, CloudTrail, GuardDuty, Security Hub, Config, etc.)
• Support secure architecture reviews for new AWS workloads and cloud-native applications
• Identify and help close gaps between AWS-native security tooling and Wiz coverage
• Contribute to least-privilege IAM initiatives, network segmentation, and encryption/key management standards

Audit, Pen Test & Vulnerability Program Support
• Act as a key technical point of contact for internal/external audits, penetration testing engagements, and vulnerability management programs
• Prepare technical evidence, control narratives, and remediation status for auditors and assessors
• Coordinate with third-party penetration testing vendors on scoping, findings review, and retesting
• Help mature the vulnerability management program, including scan cadence, SLA definitions, and exception handling processes

Cross-Functional Collaboration
• Work closely with the CISO and broader security team on risk reporting, compliance alignment (e.g., SOC 2, ISO 27001, PCI-DSS, or similar frameworks relevant to FairSquare), and security roadmap priorities
• Provide guidance and security context to engineering teams to help them build secure-by-default in AWS
• Contribute to security awareness efforts related to cloud security best practices

What We're Looking For

Required:
• 5+ years of experience in cloud security, with significant hands-on experience securing AWS environments
• Direct, practical experience administering and operationalizing a CNAPP/CSPM platform - Wiz strongly preferred (comparable experience with Prisma Cloud, Orca, Lacework, etc. considered)
• Demonstrated experience managing remediation of findings from audits, penetration tests, and/or vulnerability scans, including driving cross-team accountability to closure
• Strong working knowledge of core AWS services and security controls (IAM, VPC, KMS, S3, CloudTrail, Security Hub, GuardDuty, Config)
• Solid understanding of common vulnerability and misconfiguration classes (excessive permissions, exposed storage/services, insecure network paths, unpatched software, secrets management issues)
• Experience working with compliance/audit frameworks (SOC 2, ISO 27001, PCI-DSS, NIST CSF, or similar)
• Ability to communicate technical risk clearly to both engineers and non-technical stakeholders
• Strong organizational skills to manage multiple concurrent remediation efforts and track them to completion

Preferred:
• AWS certifications (Security Specialty, Solutions Architect)
• Experience with Infrastructure-as-Code security scanning (Terraform, CloudFormation) within Wiz or similar tooling
• Familiarity with container/Kubernetes security in AWS (EKS, ECS)
• Experience coordinating directly with external penetration testing vendors and auditors
• Scripting/automation experience (Python, AWS CLI, Lambda) to streamline remediation workflows or Wiz integrations

Why This Role

This is an opportunity to be the primary driver of cloud security outcomes at FairSquare - with direct influence over how our AWS environment is secured, how quickly risk gets reduced, and how our organization matures its relationship with audits and testing programs. You'll have deep platform ownership (Wiz) and a clear mandate to turn findings into fixes, without the overhead of people management.