СШАInfrastructure Manager
4 нед. назад
СШАSeniorHybrid
governancerisk managementcomplianceit operations
Manage and integrate internal IT operations and Governance, Risk, and Compliance functions for a cybersecurity startup.
Обязанности
- Own IT Operations: Lead day-to-day internal IT operations, including identity and access management, endpoint management, SaaS administration, onboarding/offboarding, and helpdesk functions. Establish and enforce standards for device security, patching, and configuration management across the company.
- Drive GRC & Audit Readiness: Direct the governance, risk, and compliance program. Maintain the ISO 27001 risk register, manage control ownership, collect audit evidence, and lead preparations for internal and external audits across SOC 2, ISO 27001, and ISO/IEC 42001.
- Support Security Engineering: Partner closely with Security Engineering and Detection Engineering teams to ensure internal infrastructure changes account for logging, EDR, SIEM sources, and overall detection coverage needs. Act as the primary bridge between internal IT changes and security impact reviews.
- Lead People & Programs: Directly manage and mentor the IT and Compliance/GRC leads. Build documented runbooks and scalable processes, and regularly report IT and GRC roadmap progress and risk posture to the CISO.
- Oversee Vendors & Risk: Manage vendor relationships, software licensing, and third-party vendor risk assessment workflows.
Требования
- 5+ years of hands-on experience in IT operations, infrastructure management, or related technical domains.
- 2+ years of direct people management or team leadership experience.
- Hands-on experience with compliance frameworks such as SOC 2, ISO 27001, or equivalent frameworks.
- Proven technical proficiency with IAM platforms, endpoint management systems, and core SaaS administration tooling.
- Solid baseline understanding of security engineering principles and the ability to collaborate effectively with detection teams.
- Bachelor's degree in Information Technology, Computer Science, Information Security, or equivalent practical experience.
- Excellent written and verbal communication skills with experience presenting directly to executive stakeholders and external auditors.
Будет плюсом
- Prior experience in or alongside an MDR, MSSP, or security-focused business.
- Familiarity with AI/ML governance principles, ISO/IEC 42001, or the EU AI Act.
- Professional certifications such as CISA, CISM, or ISO 27001 Lead Implementer/Auditor.
- Experience designing and executing structured third-party vendor risk assessment programs.
Условия
- Opportunity to work with cutting-edge AI-driven cybersecurity technologies and Google SecOps solutions.
- Collaborate with a talented and innovative team focused on continuously improving security operations.
- Competitive salary and benefits package.
- A culture of growth and development, with opportunities to expand your knowledge in AI, cybersecurity, and emerging technologies.
- If you're passionate about combining cybersecurity expertise with artificial intelligence and have experience with MS Sentinel, Google SecOps and Chronicle, we encourage you to apply!
Другое
- is an AI-native, automation-first, built-for-scale Managed Detection and Response (MDR) provider. We are a force multiplier for defenders, helping organizations enhance their cybersecurity posture through advanced threat detection, rapid response, and continuous protection. Our team is composed of industry experts with deep experience in cybersecurity, automation and AI-driven solutions. Backed by leading investors, we are rapidly growing and seeking top talent to join our mission of revolutionizing the AI-Native MDR landscape.
- We’re a fast growing startup backed by industry experts and top tier investors led by Crosspoint Capital Partners and also backed by Shield Capital, DTCP (formerly Deutsche Telekom Capital Partners), Deepwork Capital, and the Florida Opportunity Fund. Seed round led by Andreessen Horowitz (a16z). As an early employee, you’ll play a meaningful role in defining and building our culture. Get in on the ground floor. We’re a small but well-funded team that just raised a substantial round – joining now comes with limited risk and unlimited upside.
- Culture is one of the most important things at .AI —explore our culture deck at culture..ai to witness how we embody it, prioritizing the irreplaceable collaboration and community of in-person work.
- As Infrastructure Manager, you will own and integrate our internal IT operations and Governance, Risk, and Compliance (GRC) functions into a single, cohesive operational engine. Reporting directly to the CISO, you will bridge internal systems management, audit readiness across ISO 27001, SOC 2, and emerging AI frameworks, and our core Security Engineering mission. You will build and scale the internal foundation that keeps secure, compliant, and operating at machine speed.