InfoSec Lead

Governance, Risk, and Compliance:

• Own and evolve the GRC program in partnership with Legal and the CCO.
• Lead all efforts to achieve and maintain critical compliance certifications (SOC 2, potentially ISO 27001).
• Manage external SOC2 audits and coordinate with third-party auditors.

Policy Enforcement & Management:

• Develop, maintain, and enforce clear, practical security policies across all departments.
• Work cross-functionally with IT and HR to ensure consistent policy adherence.
• Monitor compliance with laptop MDM requirements, 2FA, policy attestations, and security training.

Strategy & Planning:

• Develop and execute a comprehensive information security roadmap aligned with business objectives.
• Lead the organization's migration to a Zero Trust security approach.
• Drive cultural change around data protection practices across all business units.