Information Technology Security Manager
We are PEAC Solutions—large enough to finance the globe, yet small enough to stand shoulder-to-shoulder with our customers. We believe in the power of partnership and the promise of possibility. Our purpose is to fuel growth by providing smart, flexible lending solutions that help businesses overcome obstacles and seize new opportunities. Backed by HPS Investment Partners, a leading global investment firm, we offer equipment financing, working capital, and inventory lending solutions that keep businesses moving forward. As the world’s largest independent equipment finance company, we are expanding our global footprint—and we are doing it with purpose, grit, and a commitment to those we serve.
You are someone who thrives in an environment where ambition meets action. You bring curiosity, resilience, and a strong sense of accountability. You see challenges as opportunities and believe in making an impact for customers, for your team, and for the business. If you are looking to be a part of a company that values partnership over hierarchy and purpose over routine, your next chapter could start here.
The Information Technology Security Manager leads PEAC Solutions’ cybersecurity program, combining strategic oversight with hands-on technical expertise to configure and maintain security controls. This role develops security strategy, governance, policies, standards, and procedures; oversees security operations, risk management, incident response, compliance, and awareness initiatives; and partners with business leaders, auditors, and third-party providers to align security priorities with business objectives.
Core Responsibilities
- Strategy and Governance: Develop and maintain the cybersecurity strategy, roadmap, policies, standards, and operating procedures.
- Security Operations and Threat Management: Oversee protection across network, endpoint, cloud, identity, email, application, and data environments; monitor emerging threats and implement preventive and detective controls.
- Incident Response: Lead triage, containment, remediation, recovery, root-cause analysis, and corrective actions following cybersecurity incidents.
- Risk and Vulnerability Management: Direct risk assessments, vulnerability reviews, penetration testing, control evaluations, and remediation tracking across internal systems, cloud services, and third parties.
- Compliance and Audit: Coordinate security audits, compliance initiatives, and evidence collection to meet regulatory, contractual, and internal requirements.
- Security Architecture and Access: Guide security design for systems, projects, integrations, and technology changes; govern authentication, privileged access, role-based permissions, and access reviews.
- Security Awareness: Deliver training and awareness programs that strengthen accountability and the organization’s security culture.
- Third-Party Oversight: Manage security vendors, auditors, and service providers to ensure effective performance and appropriate risk management.
- Metrics and Executive Reporting: Develop cybersecurity and departmental KPIs covering risk exposure, control effectiveness, operational performance, incident trends, remediation, and program maturity. Present results to executive leadership with recommendations on priorities, improvements, and resource needs.
Required Skills
- Advanced knowledge of NIST, CIS Controls, ISO 27001, and zero-trust principles.
- Hands-on experience securing Microsoft 365, Azure, hybrid infrastructure, and enterprise networks.
- Working knowledge of Microsoft Defender ATP, Fortinet security technologies, and Cisco networking and security platforms.
- Technical proficiency with firewalls, EDR/XDR, SIEM, multifactor authentication, email security, vulnerability management, encryption, and data loss prevention tools.
- Expertise in identity and access management, privileged access controls, Active Directory, and Microsoft Entra ID.
- Experience in incident response, forensic coordination, threat remediation, business recovery, and post-incident improvement.
- Ability to assess security risks, support audits, evaluate compliance, and develop policies and standards.
- Strong leadership and communication skills, including the ability to translate technical risks into business impacts and practical recommendations.
- Effective planning and prioritization skills to manage multiple initiatives, vendors, and competing demands.
Preferred Skills
- Experience with Cloudflare security, performance, and application protection services.
- Familiarity with Cisco Umbrella or Cisco Secure Access, including secure web gateway, DNS-layer security, and secure access service edge capabilities.
- Knowledge of Microsoft Exchange and Exchange Online security, including threat protection, filtering, authentication, and mail-flow controls.
Qualifications:
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred; equivalent professional experience considered.
- At least eight years of progressively responsible experience in cybersecurity, information security, or infrastructure security.
- Hands-on experience in cloud security, security operations, vulnerability management, incident response, and regulatory compliance or audit support.
- Relevant certifications, such as CISSP, CISM, CCSP, Microsoft Certified: Azure Security Engineer Associate, or equivalent, strongly preferred.
- Demonstrated ability to develop and strengthen cybersecurity programs that reduce risk and support long-term business resilience.
Additional Information:
- This is a hybrid position, based in our Mt. Laurel, NJ office, three days a week, with two days remote.
PEAC Solutions is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, ethnicity, disability, religion, national origin, gender, gender identity, gender expression, marital status, sexual orientation, age, protected veteran status, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
The successful candidate will receive competitive compensation along with our benefit package which includes medical, dental, vision, life insurance, short and long-term disability, 401(k) with match, flexible spending, and paid time off. PEAC provides one paid day off per year to support community involvement. Celebrate you by also having off your birthday on us!
Skills Required
- At least eight years of progressively responsible experience in cybersecurity, information security, or infrastructure security
- Hands-on experience in cloud security, security operations, vulnerability management, incident response, and regulatory compliance or audit support
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience
- Advanced knowledge of NIST, CIS Controls, ISO 27001, and zero-trust principles
- Hands-on experience securing Microsoft 365, Azure, hybrid infrastructure, and enterprise networks
- Working knowledge of Microsoft Defender ATP, Fortinet security technologies, and Cisco networking and security platforms
- Technical proficiency with firewalls, EDR/XDR, SIEM, multifactor authentication, email security, vulnerability management, encryption, and data loss prevention tools
- Expertise in identity and access management, privileged access controls, Active Directory, and Microsoft Entra ID
- Experience in incident response, forensic coordination, threat remediation, business recovery, and post-incident improvement
- Ability to assess security risks, support audits, evaluate compliance, and develop policies and standards
- Strong leadership and communication skills, including translating technical risks into business impacts and practical recommendations
- Effective planning and prioritization skills to manage multiple initiatives, vendors, and competing demands
- Experience with Cloudflare security, performance, and application protection services
- Familiarity with Cisco Umbrella or Cisco Secure Access, including secure web gateway, DNS-layer security, and SASE capabilities
- Knowledge of Microsoft Exchange and Exchange Online security
- Relevant certification such as CISSP, CISM, CCSP, Microsoft Certified: Azure Security Engineer Associate, or equivalent
What We Do
Marlin Leasing Corporation provides commercial equipment financing and equipment leasing to businesses, especially small and midsized firms. Its offerings include working-capital financing and inventory lending. It has historically operated in small-ticket equipment leasing, financing a range of commercial equipment—often through vendor-oriented programs that let equipment sellers offer financing to customers. The business combines equipment finance with lending solutions that help companies acquire assets and manage operating needs.
.jpeg)
