IT Security Lead

About the role

Integrant is looking for a highly experienced, hands-on IT Security Lead to own and continuously improve its IT infrastructure, enterprise technology environment, cybersecurity and information security practices. This is a technical role combining infrastructure and IT operations expertise with cybersecurity and GRC capabilities, moving between strategy and execution, including leading projects such as ISO 27001.

Key responsibilities

• Cybersecurity: strengthen security across infrastructure, cloud, endpoints, identities and corporate technology; assess the security posture, design and implement preventive, detective and corrective controls, and own vulnerability management, hardening, remediation and patching.
• Incident response: lead or support incident investigation, containment, root-cause analysis and remediation, and improve monitoring, detection and response.
• GRC: mature the Information Security Management System, lead or support ISO 27001, conduct risk assessments and risk treatment, support internal and external audits, and assess vendor and third-party risks.
• Cloud and SaaS security: secure Azure, AWS, Microsoft 365 and other platforms, fix misconfigurations, and manage secrets, keys and privileged access.
• Identity and access management: drive an identity-first approach, strengthen authentication, MFA, Conditional Access and privileged access, and improve joiner, mover and leaver processes.
• Security operations: maintain SIEM, EDR/XDR, monitoring and alerting, define incident response playbooks, and strengthen backup, disaster recovery and business continuity.
• Emerging tech: support AI adoption with appropriate security controls and evaluate risks of generative AI and other emerging technologies.
• Future growth: partner with engineering on secure SDLC, DevSecOps, threat modeling, SAST/DAST, CI/CD and container security; deep application security expertise is not required but helpful.
• Technical leadership: mentor IT team members, lead complex projects, and communicate risks to senior management.

Required profile

• 8+ years of progressive experience in IT infrastructure, systems engineering, cloud, cybersecurity or related fields.
• Experience with information security, risk management and GRC, and practical exposure to ISO 27001 or similar frameworks.
• Strong networking, firewall, VPN, endpoint and infrastructure knowledge.
• Ability to investigate complex problems independently and communicate technical risks to technical and non-technical stakeholders.
• Nice to have: mentoring an IT team, ISO 27001 Lead Implementer or Lead Auditor experience, application security or DevSecOps exposure, automation with PowerShell or Python, IaC exposure, and certifications such as CISSP, CISM or CCSP.

Required skills

• Cloud security, preferably Azure and/or AWS
• IAM, MFA, Conditional Access and least-privilege principles
• Vulnerability management, endpoint security, monitoring and incident response
• Nice to have: Microsoft Defender, Sentinel, Intune, Purview