Description

You will own the firm’s multi-year cybersecurity roadmap, expand engineering capabilities, and ensure audit-ready compliance with ISO 27001 and SOC 2.

This role is on-site.

Responsibilities

• Build and maintain the cybersecurity roadmap, conducting annual risk assessments and defining security architecture vision.
• Lead ISO 27001 and SOC 2 compliance programs, managing audit execution, evidence, and client security questionnaires.
• Expand the security function from compliance-focused to a balanced engineering model, including SOC capabilities and threat hunting.
• Drive cloud security strategy across Azure, AWS, and GCP, addressing AI/ML security risks and integration.
• Manage M&A security due diligence, assessing acquisition targets and supporting secure integration.

Required Skills

• 7+ years of cybersecurity or GRC experience.
• 5+ years leading security or compliance teams.
• Experience with Azure, AWS, and GCP cloud security.
• Proficiency with Vanta, OneTrust, SIEM, EDR, and DLP tools.
• Proven track record of building cybersecurity roadmaps and strategic plans.
• Audit program management experience (ISO 27001, SOC 2, or equivalent).
• Bachelor's degree.

Key Skills

Education

Bachelor's degree