Manager - Business Information Security Office

nCino

Actively hiring Verified listing
Us - North Carolina - Hq Posted 9 days ago $121,900$213,300 / year

At a glance

AI generated

TL;DR

As Manager in nCino’s Business Information Security Office (BISO), you will lead a team responsible for maintaining compliance documentation and facilitating customer audits under SOC 2, ISO, PCI, and STAR frameworks. Your day-to-day involves managing ticketing operations, supporting staff development, and coordinating resources to ensure timely responses to security inquiries and vendor assessments. You must have experience leading compliance-oriented teams in regulated industries, with a strong background in navigating audits and familiarity with AI due diligence frameworks. Essential skills include knowledge of information security standards, cloud security principles, and the ability to communicate technical concepts clearly to non-technical stakeholders. This role requires proficiency in managing distributed teams, ensuring adherence to regulatory requirements, and leveraging AI tools for efficiency improvements within the financial services industry.

Skills

SOC 2 ISO 27001 PCI DSS CSA STAR NIST AI RMF cloud security SaaS multi-tenant environment secure SDLC vulnerability management application security CI/CD AI tools AI-driven insights dashboards reports

What you'll do

  • Manage day-to-day operations and continuous improvement of compliance processes and documentation.
  • Oversee preparation and maintenance of compliance documentation for SOC 2, ISO, PCI, and STAR frameworks.
  • Coordinate responses to customer security due diligence requests and third-party assessments.
  • Facilitate team meetings and track progress against project milestones and compliance commitments.
  • Develop and review information security policies and procedures aligned with external regulatory requirements.
  • Utilize AI tools to enhance work efficiency and optimize business operations in compliance activities.

What we're looking for

  • At least five years of experience in information security or IT compliance with one year in team lead capacity.
  • Working knowledge of SOC 2, ISO 27001, PCI DSS, and CSA STAR frameworks.
  • Familiarity with AI risk and due diligence frameworks like NIST AI RMF.
  • Demonstrated ability to manage compliance documentation and coordinate audits in regulated environments.
  • Strong communication skills for explaining technical security concepts to non-technical stakeholders.
  • Experience managing distributed teams and prioritizing competing demands.

Market check

Salary context

This $121,900–$213,300 range sits above 49% of similar postings on FindRole.

Peer median band

$130,295$209,603

Median floor and ceiling across peers.

Typical midpoint (25–75%)

$148,262$196,668

Middle half of comparable postings.

Based on 240 comparable postings.

* 240 is the maximum number of comparable postings sampled.

Employer

About nCino

nCino is a cloud banking platform company providing end-to-end banking solutions including loan origination, deposit account opening, and customer relationship management for financial institutions. Industry: Financial Technology & Banking Software

nCino currently has 11 open roles on FindRole.

Listed pay typically runs $107,900–$183,400 across 10 roles with salary data.

Most-posted roles

View all roles at nCino

More like this

Similar roles

Senior Manager Information Security Office (ISO)

Capital One Financial

Mclean, Va, US 43 days ago $229,900$262,400
AWS Kubernetes Terraform API Security File Transfer systems Data Security Infrastructure Security Network Architecture User Access Management Agile methodologies CI/CD Cloud patch management SaaS integration Container security ERP modernization PostgreSQL Python Go

Manager of Information Security

Morningstar Inc

Chicago, Illinois, US 9 days ago $147,550$147,550
SOX SOC2 PCI-DSS GDPR SEC NIST ISO COBIT CISSP CISM CIPP

Information Systems Security Manager

Leidos

2652 Arlington Va, US 42 days ago $107,900$195,050
RMF NIST DISA DoD STIGs JSIG eMASS DRAM ACAS Splunk CI/CD Terraform AWS Kubernetes Python PostgreSQL Git Jenkins Ansible Docker

Manager, IT Governance & Security Controls

The Coca‑Cola Company

Us - Ga - Atlanta, US 18 days ago $124,600$148,200
SAP GRC Workiva ITGC SOX compliance CI/CD Kubernetes AWS Azure Google Cloud Platform Terraform Docker Python SQL PostgreSQL Linux Windows Server NIST ISO 27001 CISM CISSP

Information Security Engineering Manager

Wells Fargo

141278-Nc-Cic Customer Information Ctr, US 21 days ago $119,000$187,000
CyberArk Kubernetes DevSecOps CI/CD Agile SPIFFE SPIRE Cloud IAM Hybrid Architectures Zero Trust PAM Automation Policy-as-Code Observability Terraform AWS Azure GCP PostgreSQL MongoDB