Head of IT, Security

🕒 Outubro 2

🌵 Arizona – Remoto

🌵 Arizona – Remote

💵 $151.465 - $185.545 / ano

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Fullbay

SiteLinkedInTodas as Vagas

51 - 200 funcionários

☁️ SaaS

🏢 Corporativo

🚗 Transporte

💰 Venture Round em 2019-05

SaaS • Enterprise • Transport

Fullbay é uma solução de software abrangente projetada especificamente para oficinas de reparação de diesel e outras operações de reparação pesada. A empresa oferece uma gama de ferramentas para otimizar vários aspectos da gestão da oficina, incluindo estimativas e faturas, fluxo de trabalho de ordens de serviço, gestão de inventário e comunicação com o cliente. Fullbay integra-se a sistemas de contabilidade para uma contabilidade sem falhas e suporta comunicação por mensagem bidirecional entre clientes e oficinas. Também fornece software de reparo especializado para manutenção de frotas, operações móveis e indústrias específicas como veículos agrícolas e de emergência. Com funcionalidades como relatórios, integração MOTOR para reparos e dados seguros baseados em nuvem, a Fullbay visa maximizar a eficiência da oficina e aumentar a rentabilidade, além de contribuir para estradas mais seguras.

Descrição

• Design, build, and continuously improve Fullbay’s security program using NIST CSF 2.0 as the governance architecture and CIS Controls v8.1 (IG1 to IG2) as the tactical execution roadmap • Manage Fullbay’s always-on MDR platform and serve as the primary responder for escalated alerts • Investigate, contain, and remediate confirmed security incidents, including participation in an on-call rotation for high-severity escalations • Lead SOC 2 readiness activities, including control mapping, evidence collection, gap remediation, and audit firm coordination for Type I and Type II engagements • Own and configure the security tooling stack, including MDR, MDM, email security, anti-phishing, and security awareness tools • Author, maintain, and enforce information security policies, standards, and procedures • Oversee IAM posture across Google Workspace, including passkeys, MFA, SSO, privileged access controls, MDM, and Apple Business Manager configuration • Develop and own the incident response plan and lead post-incident reviews • Maintain a risk register, track security risks, and communicate risk posture to the VP of IT and senior leadership • Oversee security awareness training, phishing simulations, and compliance-based training cycles • Assess third-party vendor security posture, maintain a vendor risk inventory, and drive remediation • Serve as the primary escalation point for company-wide end-user technical support • Own procurement, provisioning, deprovisioning, imaging, configuration, and asset inventory for company devices • Manage user provisioning, licensing, and configuration across Google Workspace and other core SaaS applications • Own IT onboarding and offboarding, including account creation, device setup, access provisioning, and timely access removal • Manage IT vendor relationships and contracts, evaluate tools, and control IT spend • Adhere to confidentiality and compliance regulations and perform other duties as assigned

🎯 Requisitos

• 7-10 years of combined experience across IT operations and security, cybersecurity, or information security required; 10+ years preferred • Experience managing and responding to alerts from an MDR/EDR platform, including triage, investigation, and remediation of confirmed incidents, required • Demonstrated experience owning a compliance or regulatory program (SOC 2, ISO 27001, HIPAA, PCI-DSS, or equivalent) required • Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent work experience • Hands-on experience administering Google Workspace, MDM platforms (e.g., NinjaOne, Apple Business Manager), and providing general end-user IT support required • Deep knowledge of security frameworks including NIST CSF 2.0 and CIS Controls v8.1 • Working knowledge of MDR/EDR platforms and MDM solutions, with the ability to investigate and respond to escalated alerts • Required platform experience: Google Workspace administration and security configuration, Apple Business Manager (ABM), NinjaOne endpoint management • Preferred platform experience: Proofpoint email security, Ironscales anti-phishing • Strong understanding of IAM concepts including SSO, MFA, passkeys, and privileged access management • Ability to operate as a player-coach: design the security program, set the standards, and personally execute the work • Strong written and verbal communication skills with the ability to present security risk and program status to executive leadership • Experience working cross-functionally with Engineering, Legal, Finance, and business stakeholders • Preferred certifications: CISSP, CISM, CISA, CCSP, CompTIA Security+, or CASP+ • Strong general IT troubleshooting skills across Mac and Windows environments, networking fundamentals, and common business SaaS applications • Experience with IT ticketing/helpdesk systems and asset management tools • Ability to meet stated physical demands, including regularly sitting at a desk, using computer and telephone equipment, and lifting/moving up to 10 pounds

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo