Security Manager

Most Security Manager roles promise "ownership." Very few actually deliver it. RL People are representing a well established leader in ITAD, that's looking for someone to challenge the status quo, not just maintain policies, but influence how the company approaches security across the organisation as it continues to grow. This is a Security Manager role based onsite in Mather, CA, with a strong focus on Cyber Security Governance & Compliance (around 80%). That includes ownership of security policies, audits, risk management, and ensuring ongoing compliance across frameworks and internal controls. The remaining 20% of the role covers Physical Security, ensuring a joined-up approach across both digital and physical environments. They're after someone who's commercially minded, enjoys solving problems, and can confidently advise leadership on balancing innovation with security, particularly as the business begins to explore and adopt AI more broadly. Responsibilities Serve as the primary SME and point of contact for NAID AAA, R2v3, and related certifications (e.g., e-Stewards, ISO 27001, ISO 14001 as applicable), owning audit readiness year-round rather than only before scheduled audits. Maintain and continuously update all written security policies, procedures, and control documentation required to remain in compliance with certifying bodies and customer contractual security requirements. Lead or support internal audits, third-party/customer audits, unannounced NAID surveillance audits, and corrective action plans (CAPs); track findings to closure. Monitor evolving regulatory requirements (state and federal e-waste law, data privacy regulations, customer-specific security addenda) and translate changes into updated policy and practice. Maintain chain-of-custody, downstream vendor due diligence, and certificate-of-destruction/recycling documentation standards. Qualifications Bachelor's degree in Security Management, Information Security, Criminal Justice, Business, or related field, or equivalent professional experience. 5+ years of progressive experience in security management with demonstrated responsibility for both physical security and cybersecurity/information security functions. Direct experience working within, or supporting compliance for, NAID AAA and/or R2v3 certified operations strongly preferred; ITAD, electronics recycling, or data destruction industry experience highly desirable. Working knowledge of data sanitization/destruction standards (e.g., NIST 800-88), chain-of-custody principles, and downstream vendor risk management. Demonstrated experience managing physical security systems (access control, CCTV, alarm monitoring) and coordinating with vendors/integrators. Understanding of core cybersecurity concepts (network security, endpoint protection, vulnerability management, incident response) sufficient to partner effectively with IT and set policy. Experience developing and delivering employee security training programs. Strong audit management experience — preparing for, hosting, and closing out findings from internal and third-party audits. Excellent written communication skills for policy authorship and documentation that must withstand external audit scrutiny. Ability and willingness to travel approximately 25% of the time. Work Environment & Physical Requirements Primary work location is the Mather, California facility with regular presence on the operations/warehouse floor as well as office/administrative settings. Some exposure to a warehouse/industrial recycling environment (noise, equipment, material handling areas) during facility walk-throughs and audits; appropriate PPE will be provided. Ability to travel by car and/or air to other company or partner sites, approximately 10% of the time. #J-18808-Ljbffr