{"id":744319,"url":"https://alion.io/job/revoptimal-infosec-it-lead","title":"InfoSec & IT Lead","company":{"id":686824,"name":"RevOptimal","domain":"revoptimal.com","url":"https://alion.io/company/revoptimal","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New Orleans, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":123000,"max_usd":242000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":103},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false},{"name":"CI/CD","optional":true},{"name":"CloudFormation","optional":true},{"name":"Confluence","optional":true},{"name":"Google Workspace","optional":true},{"name":"Jira","optional":true},{"name":"Okta","optional":true},{"name":"Slack","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-01-12T16:58:42Z","employer_posted_date":"2026-01-12","last_verified_at":"2026-11-01T09:14:08Z","board_verified":true,"closed_at":null,"days_open":292,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":292},"description":"About RevOptimal:\nRevOptimal is building the future of privacy-conscious identity resolution for advertising. Instead of relying on outdated identifiers like cookies, IP addresses, or device IDs, we resolve identity using deterministic, people-based signals to help advertisers reach real audiences with greater precision and confidence.\nOur solutions power smarter audience targeting, cross-device attribution, and curated private marketplaces-helping brands and agencies make their data work harder.\nThe role:\nWe are hiring a hands-on InfoSec & IT Lead to design, operate, and mature a security, privacy and compliance program that protects our data, enables secure vendor & partner integrations, and keeps RevOptimal audit-ready for SOC 2 and other certifications. You will help design and build a secure cloud architecture, lead SOC 2 and ISO 27001:2022 readiness, drive Zero Trust adoption, own security operations and incident response, and be accountable for privacy compliance across US state laws and GDPR. The role also includes hands-on IT operations for a small company (\nWhat you'll do:\nSecurity strategy & architecture\nDefine and execute the company security strategy and roadmap across cloud, data, application, and infrastructure security.\nLead the design and pragmatic implementation of Zero Trust architecture principles (identity-centric controls, least-privilege access, micro-segmentation, device posture and conditional access).\nDesign and enforce secure cloud architecture patterns (AWS best practices for S3, IAM, KMS, VPCs, cross-account roles and clean-room integrations).\nImplement secure key management, encryption at rest / in transit, and data classification & retention standards appropriate for sensitive data.\nCompliance, GRC & Privacy (SOC 2, ISO 27001 & Data Privacy)\nOwn SOC 2 readiness, audit lifecycles and evidence automation.\nLead ISO 27001:2022 readiness and the ISMS lifecycle when appropriate (scoping, risk assessment & treatment, SoA, internal/external audits).\nOwn data privacy compliance frameworks across relevant regimes: US state privacy laws (e.g., CPRA/CCPA and other state statutes) and EU GDPR. Responsibilities include:\nMaintain a comprehensive data map / Record of Processing Activities (RoPA) covering personal data flows, storage locations, retention and processors.\nRun Data Protection Impact Assessments (DPIAs) for high-risk processing and partner integrations.\nOperate a DSAR / DSR process (data subject access/deletion/portability requests) and ensure timely responses that meet legal deadlines.\nManage Data Processing Agreements (DPAs) and contractual privacy controls with vendors and partners.\nImplement and enforce privacy-by-design/default controls and data minimization across technical and product solutions.\nEnsure lawful cross-border data transfer mechanisms (e.g., SCCs, adequacy assessments, and technical safeguards) and document them appropriately.\n\nOperate and maintain compliance automation tooling (e.g., Vanta) and privacy management tooling; track remediation and evidence collection.\nSecurity operations & engineering\nBuild and operate detection & monitoring (centralized logging, alerting and lightweight SIEM).\nManage vulnerability scanning, third-party pen testing, remediation workflows and risk treatment.\nPartner & cloud integrations\nSecure onboarding and hardening of partner integrations (S3 buckets, IAM roles, cross-account access, clean-room patterns).\nAssess and govern third-party security and privacy posture with technical and contractual controls.\nIT operations & employee support\nManage day-to-day IT for a company Own vendor relationships for IT/security/privacy services and provide escalated IT support.\nTeam, communication & culture\nEvangelize security and privacy across the company: training, phishing simulations, privacy awareness.\nReport security and privacy KPIs to executives (SOC 2/ISO coverage, Zero Trust adoption, DSAR SLAs, MTTR).\nRequired Qualifications:\n6+ years of professional experience in information security, with at least 3 years in a leadership/managerial role.\nHands-on cloud security experience in AWS (S3, IAM, KMS, CloudTrail, CloudWatch, VPCs, cross-account roles).\nProven experience leading SOC 2 readiness and audit programs and operating compliance automation tools.\nPractical experience implementing Zero Trust principles in cloud environments.\nPractical experience with GDPR and with US state privacy laws (CCPA/CPRA and/or other modern state privacy statutes), including DSAR/DSR handling, DPIAs, RoPA, DPAs and breach notification processes.\nStrong operational security capabilities (vulnerability management, IR, logging/monitoring, IAM, encryption).\nPractical IT operations experience for small companies (MDM, SSO/MFA, onboarding/offboarding).\nExcellent written and verbal communication skills.\nFormal security certification preferred (CISSP, CISM).\nPreferred / nice-to-have\nExperience directly driving or supporting ISO 27001:2022 certification and managing an ISMS.\nPrivacy certifications: CIPP/US, CIPP/E or equivalent.\nExperience designing and implementing Zero Trust at scale and familiarity with NIST SP 800-207.\nFamiliarity with privacy and governance tooling (OneTrust, TrustArc, BigID) and with SOC 2 automation (Vanta).\nInfrastructure as code experience (Terraform/CloudFormation) and secure CI/CD pipelines.\nExperience with global privacy topics (Schrems II implications, SCCs, adequacy) and with managing cross-border transfer risk.\nFamiliarity with CPRA, Virginia, Colorado, Connecticut, Utah privacy rules and breach notification regimes.\nTools & technical environment (what you’ll use)\nCloud: AWS - S3, IAM, KMS, CloudTrail, CloudWatch, Inspector/Inspector2, cross-account roles, clean-room patterns.\nCompliance & privacy: Vanta (SOC 2 automation) and privacy management tools (OneTrust/TrustArc or equivalent) for RoPA/DPIAs/DSAR workflows.\nIdentity & Zero Trust tooling: SSO/IdP (Okta/AWS SSO), MFA/conditional access, ZTNA/SASE or equivalent.\nProductivity & HR: Google Workspace, Slack, Atlassian (Jira/Confluence), Rippling.\nDetection/EDR/SIEM: CloudWatch/CloudTrail, AWS Inspector/Inspector2, chosen EDR/SIEM tooling.","description_format":"text","description_chars":6177,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Advertising","Data Providers & Datasets","Marketing Analytics & Attribution"],"lifecycle":[{"event":"open","at":"2026-09-11T13:41:55Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.226,"p_room":0.28,"age_days":292,"expected_fill_days":28,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/revoptimal-infosec-it-lead","json_url":"https://alion.io/job/revoptimal-infosec-it-lead.json","meta":{"generated_at":"2026-11-01T11:01:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17010,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686824},"rest":"https://alion.io/mcp/rest/get_company?id=686824"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frevoptimal-infosec-it-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frevoptimal-infosec-it-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frevoptimal-infosec-it-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/revoptimal-infosec-it-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frevoptimal-infosec-it-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":744319}},{"tool":"search_jobs","arguments":{"company":"revoptimal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":744319},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}