IT Asset Security Manager

Position Summary

The IT Asset Security Manager is responsible for securing the organization s IT assets across their full lifecycle-from procurement and deployment through monitoring, maintenance, and secure retirement. This role ensures that hardware, software, cloud resources, and related technology assets are accurately inventoried, appropriately protected, compliant with security and regulatory requirements, and managed in a manner that reduces operational, financial, and cybersecurity risk.

This position typically reports to a senior leader within Cybersecurity, IT Governance, Risk Management, or Infrastructure Operations. The role works closely with Security Operations, IT Operations, Procurement, Finance, Compliance, Legal, Internal Audit, and business technology owners to ensure assets are secure, governed, and aligned with organizational risk priorities.

Essential Duties and Responsibilities

• Develop, implement, and maintain an IT asset security strategy that aligns asset management practices with cybersecurity, risk management, compliance, and business objectives.
• Maintain accurate visibility of IT assets, including endpoints, servers, network devices, software, SaaS platforms, cloud resources, and other technology assets.
• Partner with IT, security operations, procurement, finance, compliance, and business stakeholders to ensure assets are properly classified, owned, tracked, secured, and retired.
• Establish and enforce asset security controls, including ownership assignment, configuration standards, vulnerability management alignment, encryption requirements, access controls, and secure disposal procedures.
• Identify and assess risks associated with unmanaged, misconfigured, unsupported, unauthorized, or end-of-life assets and drive remediation plans to reduce exposure.
• Support software license compliance, vendor risk reviews, asset lifecycle governance, and audit readiness activities.
• Define and monitor key asset security metrics, including inventory completeness, control coverage, vulnerability exposure, end-of-life assets, unauthorized devices, and remediation progress.
• Coordinate with incident response and security operations teams to ensure asset data supports rapid investigation, containment, and recovery during security events.
• Lead periodic asset security reviews, reconciliations, and audits to validate data quality, control effectiveness, and compliance with internal policies and external requirements.
• Develop policies, procedures, standards, and reporting materials that communicate asset security risks, priorities, and remediation progress to leadership.

Required Qualifications

• Bachelor s degree in Information Technology, Cybersecurity, Information Systems, Business, or a related field, or equivalent professional experience.
• 12+yrs of experience managing IT assets, cybersecurity controls, vulnerability risk, technology governance, or related IT operations functions.
• Strong understanding of IT asset lifecycle management, including procurement, deployment, maintenance, monitoring, and secure disposal.
• Working knowledge of cybersecurity risk management practices, asset inventory controls, vulnerability management, configuration management, and access control principles.
• Ability to analyze asset data, identify risk trends, prioritize remediation activities, and communicate findings to technical and executive audiences.
• Experience working with IT asset management, CMDB, endpoint management, vulnerability management, cloud inventory, or security monitoring platforms.
• Strong collaboration, documentation, governance, and stakeholder management skills.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CRISC, CISA, Security+, ITIL, CSAM, CHAMP, or equivalent asset management, security, or risk certifications.
• Experience supporting regulatory, audit, or compliance frameworks such as ISO/IEC 27001, SOC 2, PCI DSS, NIST Cybersecurity Framework, or similar standards.
• Familiarity with ServiceNow, Microsoft Intune, Microsoft Defender, SCCM, Tanium, Qualys, Rapid7, Tenable, Wiz, AWS, Azure, or comparable ITAM, endpoint, cloud, and vulnerability management tools.
• Experience developing executive-level dashboards, risk reporting, control metrics, and remediation plans.
• Experience managing third-party technology assets, SaaS platforms, cloud services, and non-human identities associated with enterprise IT environments.

Key Competencies

• Security-minded asset lifecycle governance
• Risk identification, prioritization, and remediation tracking
• Cross-functional leadership and stakeholder coordination
• Data-driven reporting and executive communication
• Policy, process, and control development
• Audit readiness and compliance support
• Operational discipline and attention to detail

Success Measures

• Improved accuracy and completeness of the organization s IT asset inventory.
• Reduced number of unmanaged, unauthorized, unsupported, or end-of-life assets.
• Improved alignment between asset records, vulnerability management data, endpoint controls, and security monitoring coverage.
• Timely remediation of asset-related security risks and audit findings.
• Clear, actionable reporting of asset security posture, risk trends, and control gaps to leadership.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.