IT Security Lead

Cybersecurity Strengthen security across Integrant's infrastructure, cloud services, endpoints, identities, and corporate technology ecosystem. Continuously assess the organization's cybersecurity posture and identify vulnerabilities and control gaps. Design and implement appropriate preventive, detective, and corrective security controls. Own vulnerability management, security hardening, remediation, and patching priorities. Strengthen endpoint, network, identity, email, and cloud security. Implement security principles including Zero Trust, least privilege, defense in depth, and secure-by-default configurations. Improve security monitoring, detection, investigation, and response capabilities. Lead or support cybersecurity incident investigation, containment, root-cause analysis, and remediation. Evaluate cybersecurity technologies and recommend improvements to the organization's security architecture. Information Security, Governance, Risk & Compliance (GRC) Ensure Integrant maintains effective information security governance while meeting business, customer, and compliance expectations. Support and continuously mature Integrant's Information Security Management System (ISMS). Lead or support ISO 27001 activities, SOC || including risk assessments, control implementation, audits, remediation, and continuous improvement. Maintain and improve information security policies, standards, procedures, and technical controls. Conduct information security risk assessments and drive appropriate risk-treatment plans. Maintain visibility of security risks, control gaps, remediation actions, and exceptions. Support internal and external security audits. Participate in customer security assessments and security questionnaires when required. Assess security risks associated with vendors, SaaS platforms, and third-party technology providers. Establish meaningful security metrics and provide management with visibility into key risks and improvements. Cloud & SaaS Security Ensure that Integrant's cloud and SaaS environments remain secure, well-governed, and appropriately monitored. Establish and maintain secure configurations across Azure, AWS, Microsoft 365, and other SaaS platforms. Strengthen cloud identity, privileged access, workload, data, and configuration security. Improve logging, monitoring, and visibility across cloud services. Identify cloud misconfigurations and security gaps and drive remediation. Evaluate the security implications of new cloud services and integrations before adoption. Implement appropriate secrets, keys, and privileged access management practices. Identity & Access Management Drive a strong identity-first security model across the organization. Own and continuously improve Identity & Access Management practices. Strengthen authentication, authorization, MFA, Conditional Access, and privileged access. Apply least-privilege principles across users, administrators, systems, and services. Improve joiner, mover, and leaver access processes. Regularly review privileged and sensitive access. Support the organization's evolution toward Zero Trust principles. Security Operations & Resilience Build effective capabilities for detecting, responding to, and recovering from technology and security incidents. Maintain appropriate SIEM, EDR/XDR, vulnerability management, monitoring, and alerting capabilities. Define and continuously improve incident response processes and playbooks. Ensure security events are appropriately investigated, documented, and remediated. Conduct root-cause analysis following major incidents. Strengthen backup, disaster recovery, and business continuity readiness. Periodically test recovery and incident-response capabilities. AI & Emerging Technology Security Support Integrant's adoption of AI technologies while ensuring appropriate security and governance. Evaluate security risks associated with Generative AI and emerging technologies. Establish appropriate security controls and guidelines for corporate AI usage. Address risks related to sensitive data exposure, unauthorized AI tools, third-party AI platforms, and insecure integrations. Partner with relevant stakeholders to enable innovation while maintaining appropriate security safeguards. Application Security Future Growth Area As Integrant's security maturity evolves, the role will partner with Engineering teams to expand security practices into the software development lifecycle. Potential areas include: Secure SDLC DevSecOps Threat modeling SAST / DAST CI/CD security Container and Kubernetes security Secure coding practices Deep application security expertise is not a core requirement for joining the role, but previous exposure would be a strong advantage. Desired Candidate Profile 8+ years of progressive experience across IT Infrastructure, Systems Engineering, Cloud, Cybersecurity, or related technology functions. Strong understanding of cybersecurity principles and enterprise security controls. Experience with Information Security, risk management, and GRC practices. Practical exposure to ISO 27001 or similar information security frameworks. Strong understanding networking, firewalls, VPNs, endpoints, and enterprise infrastructure. Experience securing cloud environments, preferably Azure and/or AWS. Strong knowledge of IAM, privileged access, MFA, Conditional Access, and least-privilege principles. Experience with vulnerability management, endpoint security, monitoring, and incident response. Ability to independently investigate complex infrastructure and security problems and drive them through resolution. Strong project ownership and stakeholder-management capabilities. Ability to communicate technical risks and recommendations to both technical and non-technical stakeholders. Nice to Have Experience technically mentoring or supervising an IT team. ISO 27001 Lead Implementer / Lead Auditor experience. Experience with Microsoft Defender, Sentinel, Intune, Purview, or similar platforms. Application Security or DevSecOps exposure. AI security/governance experience. Automation using PowerShell, Python, or similar technologies. Infrastructure as Code exposure. Relevant certifications such as CISSP, CISM, CCSP, ISO 27001, SC-100, AZ-500, or equivalent.