Head of IT Security

We are looking for a Head of IT Security to join our IT Team to improve infrastructure in our Detroit office. The candidate must have a bachelor's degree in Information Technology with a focus on Cybersecurity or a closely related field with at least 15 years of related experience. Candidates should also have strong leadership and project management skills, with the ability to manage and manipulate multiple and shifting priorities. A flexible hybrid-remote work schedule is available after 30 days of employment.

Typical responsibilities include:

• Monitor all enterprise components for security threats and address any incidents.
• Build security best practices to strengthen the organization's security posture.
• Provide guidance to all internal IT teams to identify and remediate security gaps.
• Build security considerations into a developing Business Continuity plan.
• Maintain all security tools and technologies and introduce new relevant tools.
• Monitor policy compliance as the organization adopts NIST 800-171 guidelines.
• Work company-wide to reduce risk and ensure security awareness and prominence.
• Create and audit policies and controls while continuously striving for improvement.
• Create a security incident response program within IT then extend it enterprise wide.
• Regularly report security incidents and security program progress to the V.P. of IT.
• Develop and mature a company-wide Governance, Risk, and Compliance (GRC) program in partnership with the existing GRC Analyst, including practical security policies, risk registers, control ownership, evidence collection, audit readiness, vendor/security reviews, and executive-level reporting aligned to NIST 800-171 and business requirements.
• Ensure compliance to all relevant Information Security controls required by local laws, regulations, and contracts.
• Maintain a safe working environment.

Education:

• Bachelor's degree in Information Technology with a focus on Cybersecurity or a related field.
• Certifications in CISA, CISM, or CISSP preferred.

Skills/Expereince:

• Manage and manipulate multiple and often shifting priorities.
• Maintain a high level of technical subject matter expertise.
• Working knowledge of Server Infrastructure in a Windows Server environment
• Vast familiarity with Networking concepts to guide current Network team security improvement efforts
• Professional yet patient when driving IT Security awareness and enforcing policy throughout the organization