Global IT Manager, Security & Compliance

🔥 20 hours ago

🇺🇸 United States – Remote

💵 $135k - $145k / year

⏰ Full Time

🟠 Senior

🔴 Lead

💻 IT Support

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Serverfarm

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1999

🏢 Enterprise

📡 Telecommunications

☁️ SaaS

💰 Debt Financing on 2021-10

Enterprise • Telecommunications • SaaS

Serverfarm is a global leader in Data Center Management as a Service (DMaaS), providing colocation, data center design, and IT infrastructure management solutions. For over 25 years, Serverfarm has maximized operational efficiencies and managed critical IT environments for top enterprises worldwide. With a modern and award-winning portfolio of data centers, they offer flexible and sustainable solutions that enhance performance and reduce carbon emissions. Serverfarm's expert team and sophisticated InCommand DMaaS platform provide robust management of data centers, helping enterprises focus on innovation while optimizing their IT infrastructure.

📋 Description

• Own the IT evidence program across ISO 27001:2022, SOC 1, SOC 2, PCI DSS, and HIPAA for approximately thirteen operating sites. • Act as IT's counterpart to external certification bodies and auditors; prepare for audits, present and defend control evidence, and own remediation of IT findings through closure. • Manage third-party and vendor risk management for IT, including vendor security assessments and periodic reassessment. • Own customer-facing security due diligence, including questionnaires, audits, and assessments. • Maintain the IT risk register and opportunities-for-improvement log, driving items to closure. • Coordinate IT participation in business continuity and disaster recovery testing and document results. • Manage vulnerability management end to end, including scanning coverage, triage, remediation ownership, escalation, and leadership reporting. • Oversee endpoint detection and response and the security alerting pipeline; ensure alerts are assigned, investigated, recorded, and closed. • Lead security incident response, including containment, investigation, root cause analysis, customer-facing incident reporting, and post-incident hardening. • Manage email security, including domain authentication posture and secure email gateway configuration. • Run the security awareness program, including monthly phishing simulations, results analysis, and targeted follow-up. • Contribute to identity governance across a hybrid cloud and on-premises identity-provider estate. • Oversee access reviews, privileged access controls, and the joiner-mover-leaver process, including third-party and contractor access.

🎯 Requirements

• Eight or more years in information security, IT compliance, or IT risk, with meaningful time spent in both compliance and technical security work. • Demonstrated ownership of an ISO 27001 program, including direct experience preparing for and defending findings with an external certification body. • Hands-on experience with at least two of: SOC 2, PCI DSS, HIPAA, NIS2, or DORA. • Genuine technical depth, including reading firewall and authentication logs, assessing vulnerability scans, evaluating OAuth consent requests, and challenging proposed remediations. • Experience with vulnerability management platforms, endpoint detection and response tooling, and enterprise identity platforms. • Experience leading security incident response through to a customer-facing or executive-facing conclusion. • Ability to communicate risk credibly to both engineers and executives, and to hold vendors and internal stakeholders accountable without formal authority. • Willingness to travel to sites periodically for audit, assessment, and control validation.

🏖️ Benefits

• Paid time off • Paid holidays • 401(k) • Full coverage medical insurance • Full coverage dental insurance • Full coverage vision insurance