Security & IT Lead

Summary

Owns end-to-end information security and compliance programs including IAM, endpoint protection, vulnerability reviews, incident response, and SOC 2 readiness and maintenance. Acts as the internal technical owner of the managed IT provider and IT roadmap (network, endpoint fleet, SLAs), evaluates security risk for vendors and AI tools, and maintains policy and risk documentation.