Head of IT, Security

🕒 il y a 14 jours

🌵 Arizona – Distant

🌵 Arizona – Remote

💵 $151 465 - $185 545 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Fullbay

Site WebLinkedInTous les Emplois

51 - 200 employés

☁️ SaaS

🏢 Entreprise

🚗 Transport

💰 Venture Round en 2019-05

SaaS • Enterprise • Transport

Fullbay est une solution logicielle complète conçue spécifiquement pour les ateliers de réparation diesel et d'autres opérations de réparation de véhicules lourds. L'entreprise offre une gamme d'outils pour simplifier divers aspects de la gestion de l'atelier, notamment les devis et factures, le flux de travail des ordres de service, la gestion des stocks et la communication avec les clients. Fullbay s'intègre aux systèmes comptables pour une tenue de livres sans faille et prend en charge la messagerie bidirectionnelle entre les clients et les ateliers. Elle fournit également un logiciel de réparation spécialisé pour l'entretien de flotte, les opérations mobiles et des industries spécifiques telles que les véhicules agricoles et d'urgence. Avec des fonctionnalités comme des rapports, l'intégration MOTOR pour les réparations, et des données sécurisées sur le cloud, Fullbay vise à maximiser l'efficacité des ateliers et à accroître leur rentabilité tout en contribuant à la sécurité routière.

Description

• Design, build, and continuously improve Fullbay’s security program using NIST CSF 2.0 as the governance architecture and CIS Controls v8.1 (IG1 to IG2) as the tactical execution roadmap • Manage Fullbay’s always-on MDR platform and serve as the primary responder for escalated alerts • Investigate, contain, and remediate confirmed security incidents, including participation in an on-call rotation for high-severity escalations • Lead SOC 2 readiness activities, including control mapping, evidence collection, gap remediation, and audit firm coordination for Type I and Type II engagements • Own and configure the security tooling stack, including MDR, MDM, email security, anti-phishing, and security awareness tools • Author, maintain, and enforce information security policies, standards, and procedures • Oversee IAM posture across Google Workspace, including passkeys, MFA, SSO, privileged access controls, MDM, and Apple Business Manager configuration • Develop and own the incident response plan and lead post-incident reviews • Maintain a risk register, track security risks, and communicate risk posture to the VP of IT and senior leadership • Oversee security awareness training, phishing simulations, and compliance-based training cycles • Assess third-party vendor security posture, maintain a vendor risk inventory, and drive remediation • Serve as the primary escalation point for company-wide end-user technical support • Own procurement, provisioning, deprovisioning, imaging, configuration, and asset inventory for company devices • Manage user provisioning, licensing, and configuration across Google Workspace and other core SaaS applications • Own IT onboarding and offboarding, including account creation, device setup, access provisioning, and timely access removal • Manage IT vendor relationships and contracts, evaluate tools, and control IT spend • Adhere to confidentiality and compliance regulations and perform other duties as assigned

🎯 Exigences

• 7-10 years of combined experience across IT operations and security, cybersecurity, or information security required; 10+ years preferred • Experience managing and responding to alerts from an MDR/EDR platform, including triage, investigation, and remediation of confirmed incidents, required • Demonstrated experience owning a compliance or regulatory program (SOC 2, ISO 27001, HIPAA, PCI-DSS, or equivalent) required • Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent work experience • Hands-on experience administering Google Workspace, MDM platforms (e.g., NinjaOne, Apple Business Manager), and providing general end-user IT support required • Deep knowledge of security frameworks including NIST CSF 2.0 and CIS Controls v8.1 • Working knowledge of MDR/EDR platforms and MDM solutions, with the ability to investigate and respond to escalated alerts • Required platform experience: Google Workspace administration and security configuration, Apple Business Manager (ABM), NinjaOne endpoint management • Preferred platform experience: Proofpoint email security, Ironscales anti-phishing • Strong understanding of IAM concepts including SSO, MFA, passkeys, and privileged access management • Ability to operate as a player-coach: design the security program, set the standards, and personally execute the work • Strong written and verbal communication skills with the ability to present security risk and program status to executive leadership • Experience working cross-functionally with Engineering, Legal, Finance, and business stakeholders • Preferred certifications: CISSP, CISM, CISA, CCSP, CompTIA Security+, or CASP+ • Strong general IT troubleshooting skills across Mac and Windows environments, networking fundamentals, and common business SaaS applications • Experience with IT ticketing/helpdesk systems and asset management tools • Ability to meet stated physical demands, including regularly sitting at a desk, using computer and telephone equipment, and lifting/moving up to 10 pounds