Head of IT, Security

🔥 12 hours ago

🌵 Arizona – Remote

🌵 Arizona – Remote

💵 $151.5k - $185.5k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fullbay

WebsiteLinkedInAll Job Openings

51 - 200 employees

☁️ SaaS

🏢 Enterprise

🚗 Transport

💰 Venture Round on 2019-05

SaaS • Enterprise • Transport

Fullbay is a comprehensive software solution designed specifically for diesel repair shops and other heavy-duty repair operations. The company offers a range of tools to streamline various aspects of shop management, including estimates and invoices, service order workflow, inventory management, and customer communication. Fullbay integrates with accounting systems for seamless bookkeeping and supports two-way texting between customers and shops. It also provides specialized repair software for fleet maintenance, mobile operations, and specific industries such as agricultural and emergency vehicles. With features like reporting, MOTOR integration for repairs, and secure cloud-based data, Fullbay aims to maximize shop efficiency and enhance profitability while contributing to safer roads.

📋 Description

• Design, build, and continuously improve Fullbay’s security program using NIST CSF 2.0 as the governance architecture and CIS Controls v8.1 (IG1 to IG2) as the tactical execution roadmap • Manage Fullbay’s always-on MDR platform and serve as the primary responder for escalated alerts • Investigate, contain, and remediate confirmed security incidents, including participation in an on-call rotation for high-severity escalations • Lead SOC 2 readiness activities, including control mapping, evidence collection, gap remediation, and audit firm coordination for Type I and Type II engagements • Own and configure the security tooling stack, including MDR, MDM, email security, anti-phishing, and security awareness tools • Author, maintain, and enforce information security policies, standards, and procedures • Oversee IAM posture across Google Workspace, including passkeys, MFA, SSO, privileged access controls, MDM, and Apple Business Manager configuration • Develop and own the incident response plan and lead post-incident reviews • Maintain a risk register, track security risks, and communicate risk posture to the VP of IT and senior leadership • Oversee security awareness training, phishing simulations, and compliance-based training cycles • Assess third-party vendor security posture, maintain a vendor risk inventory, and drive remediation • Serve as the primary escalation point for company-wide end-user technical support • Own procurement, provisioning, deprovisioning, imaging, configuration, and asset inventory for company devices • Manage user provisioning, licensing, and configuration across Google Workspace and other core SaaS applications • Own IT onboarding and offboarding, including account creation, device setup, access provisioning, and timely access removal • Manage IT vendor relationships and contracts, evaluate tools, and control IT spend • Adhere to confidentiality and compliance regulations and perform other duties as assigned

🎯 Requirements

• 7-10 years of combined experience across IT operations and security, cybersecurity, or information security required; 10+ years preferred • Experience managing and responding to alerts from an MDR/EDR platform, including triage, investigation, and remediation of confirmed incidents, required • Demonstrated experience owning a compliance or regulatory program (SOC 2, ISO 27001, HIPAA, PCI-DSS, or equivalent) required • Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent work experience • Hands-on experience administering Google Workspace, MDM platforms (e.g., NinjaOne, Apple Business Manager), and providing general end-user IT support required • Deep knowledge of security frameworks including NIST CSF 2.0 and CIS Controls v8.1 • Working knowledge of MDR/EDR platforms and MDM solutions, with the ability to investigate and respond to escalated alerts • Required platform experience: Google Workspace administration and security configuration, Apple Business Manager (ABM), NinjaOne endpoint management • Preferred platform experience: Proofpoint email security, Ironscales anti-phishing • Strong understanding of IAM concepts including SSO, MFA, passkeys, and privileged access management • Ability to operate as a player-coach: design the security program, set the standards, and personally execute the work • Strong written and verbal communication skills with the ability to present security risk and program status to executive leadership • Experience working cross-functionally with Engineering, Legal, Finance, and business stakeholders • Preferred certifications: CISSP, CISM, CISA, CCSP, CompTIA Security+, or CASP+ • Strong general IT troubleshooting skills across Mac and Windows environments, networking fundamentals, and common business SaaS applications • Experience with IT ticketing/helpdesk systems and asset management tools • Ability to meet stated physical demands, including regularly sitting at a desk, using computer and telephone equipment, and lifting/moving up to 10 pounds