QMS Manager
Build and lead a Security Quality Management System for agentic and human-led SOC investigations, establishing quality standards, sampling, validation, reporting, and corrective actions. The role requires 5+ years in quality, governance, operational excellence, or controls, plus security operations and people-management experience.
About the job
Responsibilities
- Build and maintain the Security Quality Management System across agentic and human-led investigations.
- Establish sampling methodologies, review cadences, quality standards, and validation criteria for decisions, workflows, escalations, and remediations.
- Independently review agentic investigation outcomes and compare agentic decisions with expert analyst outcomes to establish trusted human baselines.
- Monitor decision quality, workflow effectiveness, behavioral drift, and recurring failure patterns; escalate significant risks before they affect customers.
- Produce quality scorecards and reporting covering accuracy, trends, confidence intervals, and operational impact.
- Lead root-cause analysis and corrective-action validation, translating findings into improvements with Analysis, Product, Engineering, and Security Operations.
- Use AI tools for analysis, reporting, and synthesis while validating outputs with sound judgment.
- Initially build the function hands-on, with expected growth into hiring, coaching, and managing the QMS team.
Requirements
- 5+ years of experience building or managing quality, governance, operational excellence, or control programs, ideally in security operations.
- Experience managing people, setting expectations, coaching performance, and developing team capability.
- Background in security operations, including SOC investigations, analyst decisions, escalations, and remediation outcomes.
- Ability to design quality measurements, sampling approaches, review processes, and reporting that distinguish signal from noise.
- Experience building programs from scratch and adapting standards to changing systems, workflows, and operational needs.
- Strong, direct, constructive communication and independent assessment skills.
- Ability to convert quality risks into clear corrective actions.
- Experience using AI tools for analysis and reporting while maintaining accuracy and accountability.
Compensation and Benefits
- $185,000–$200,000 annual base salary, plus bonus and equity.
- 100% remote work environment.
- Paid time off, including vacation, sick time, and paid holidays.
- 12 weeks of paid parental leave.
- Medical, dental, and vision benefits.
- 401(k) with a 5% contribution regardless of employee contribution.
- Life and disability insurance.
- Stock options for full-time employees.
- $500 one-time home office reimbursement.
- Annual education and professional development assistance.
- $75 USD/month digital reimbursement.
- Access to coaching and professional growth resources.
Skills
Quality Management Systems, Security Operations, Soc Investigations, Quality Assurance, Governance, Root Cause Analysis, Corrective Actions, Sampling Methodologies, Quality Metrics, AI Tools
Similar jobs
Security Engineering jobs
Glean
United States
Develop and maintain secure platform software spanning authentication, authorization, communications, data access, and automated security testing. The role requires 5+ years of security-focused software development experience, strong coding skills, and expertise in cloud and container security.
Glean
United States
Leads vulnerability management and application-security initiatives across the technology stack, securing operating-system images, open-source dependencies, CI/CD pipelines, containers, and cloud-native systems. Requires 5+ years of application-security experience, coding ability, and expertise in vulnerability-scanning practices.
Onebrief
United States
Own and strengthen Onebrief’s corporate security stack across endpoints, identity, SaaS, Zero Trust, and monitoring. The role emphasizes security automation, configuration-baseline enforcement, telemetry integration, and continuously validated compliance controls.
Exa
San Francisco, CA
The Security Engineer will secure cloud infrastructure, engineering systems, APIs, model-training environments, and GPU clusters while supporting rapid delivery. The role requires hands-on cloud security, IAM, secrets and certificate management, compliance ownership, vulnerability monitoring, and incident response experience.
Decagon
San Francisco, CA
Own and operate Decagon’s privacy and GRC programs, including regulatory compliance, data governance, customer security engagements, audits, and cross-functional privacy initiatives. The role requires 5+ years of GRC experience, strong communication and project management skills, and familiarity with enterprise security controls.