Description

Own the cybersecurity strategy, compliance execution, and team expansion for the organization.

This role is on-site.

Responsibilities

• Build and maintain the multi-year cybersecurity roadmap aligned with business objectives.
• Lead ISO 27001 and SOC 2 compliance programs, audit execution, and evidence maintenance.
• Drive cloud security strategy across Azure, AWS, and SaaS applications.
• Conduct annual risk assessments, define security architecture vision, and manage M&A security due diligence.
• Recruit and develop cybersecurity engineers, expanding the team from compliance-focused to a balanced engineering model.

Required Skills

• 7+ years of cybersecurity or GRC experience, including 5+ years leading security or compliance teams.
• Proven track record building cybersecurity roadmaps and strategic plans.
• Experience with security frameworks: NIST, ISO 27001, SOC 2, CIS Controls.
• Proficiency with security tools: SIEM, EDR, DLP, vulnerability management, and GRC platforms.
• Cloud security expertise in Azure, AWS, or GCP.
• Identity and access management, incident response, and threat analysis.
• Security compliance and audit processes, including risk assessment methodologies.

Preferred Skills

• Professional certifications: CISSP, CISM, or CISA.
• Experience with AI/ML security risks.

Key Skills

Education

Bachelor's degree