Information Security Lead
New
A
ACQInformation security
Remote, USA., standard Pacific Time business hours, Monday through FridayFull-TimeLead
Salary200,000 - 225,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years of information security experience
- Required Skills
- PythonTerraform
Requirements
- Have 7+ years of information security experience, including experience operating ISO 27001 programs.
- Hold an active CISSP certification, or be eligible and committed to obtain it within six months of hire.
- Bring experience remediating security incidents and building logging, monitoring, and detection capabilities.
- Be able to read and write code, ideally in Python and JavaScript/TypeScript, to identify attack paths, assess vulnerabilities, and recommend code-level fixes.
- Have proficiency with infrastructure-as-code tools such as Pulumi or Terraform, cloud IAM, and deployment workflows.
- Have knowledge of AI and agentic systems and experience establishing practical security controls for their use.
- ISO 42001 and CGRC experience are preferred.
- Experience serving as a foundational or sole information security owner is highly preferred.
- Work standard Pacific Time business hours, Monday through Friday, with flexibility to support security incidents and critical business needs.
- Some travel to Las Vegas is required.
Responsibilities
- Operate ISO 27001 and ISO 42001 management systems through evidence collection, risk management, control testing, audits, management reviews, and corrective actions.
- Build and run security operations, including logging, detection engineering, alert triage, incident response, investigations, exercises, and post-incident improvement.
- Own security policies, standards, risk acceptance, vulnerability governance, leadership reporting, security awareness, and the function's maturity roadmap.
- Lead identity, access, vendor, and data-protection controls, including privileged-access governance, reviews, third-party assessments, and data classification and retention.
- Review application and cloud architecture, application code, infrastructure-as-code, IAM policies, CI/CD workflows, and material vulnerabilities with engineering owners.
- Establish security and governance controls for AI systems, including inventories, impact assessments, access boundaries, audit trails, and tested shutdown mechanisms.
View Full Description & ApplyYou'll be redirected to the employer's site
