IT Security Lead

Integrant is looking for a highly experienced, hands-on IT  Security Lead to own and continuously improve our IT infrastructure, enterprise technology environment, cybersecurity, and information security practices.  This is a highly technical role for someone who combines strong infrastructure and IT operations expertise with solid cybersecurity and Governance, Risk & Compliance (GRC) capabilities.  The successful candidate will be comfortable moving between strategy and execution—designing technical solutions, troubleshooting complex issues, strengthening security controls, driving infrastructure improvements, supporting compliance initiatives, and leading strategic projects such as ISO 27001 

Key Responsibilities  Cybersecurity  Strengthen security across Integrant's infrastructure, cloud services, endpoints, identities, and corporate technology ecosystem.  • Continuously assess the organization's cybersecurity posture and identify vulnerabilities and control gaps. 

• Design and implement appropriate preventive, detective, and corrective security controls. 

• Own vulnerability management, security hardening, remediation, and patching priorities. 

• Strengthen endpoint, network, identity, email, and cloud security. 

• Implement security principles including Zero Trust, least privilege, defense in depth, and secure-by-default configurations. 

• Improve security monitoring, detection, investigation, and response capabilities. 

• Lead or support cybersecurity incident investigation, containment, root-cause analysis, and remediation. 

• Evaluate cybersecurity technologies and recommend improvements to the organization's security architecture. 

Information Security, Governance, Risk & Compliance (GRC)  Ensure Integrant maintains effective information security governance while meeting business, customer, and compliance expectations.  • Support and continuously mature Integrant's Information Security Management System (ISMS). 

• Lead or support ISO 27001 activities, SOC || including risk assessments, control implementation, audits, remediation, and continuous improvement. 

• Maintain and improve information security policies, standards, procedures, and technical controls. 

• Conduct information security risk assessments and drive appropriate risk-treatment plans. 

• Maintain visibility of security risks, control gaps, remediation actions, and exceptions. 

• Support internal and external security audits. 

• Participate in customer security assessments and security questionnaires when required. 

• Assess security risks associated with vendors, SaaS platforms, and third-party technology providers. 

• Establish meaningful security metrics and provide management with visibility into key risks and improvements. 

Cloud & SaaS Security  Ensure that Integrant's cloud and SaaS environments remain secure, well-governed, and appropriately monitored.  • Establish and maintain secure configurations across Azure, AWS, Microsoft 365, and other SaaS platforms. 

• Strengthen cloud identity, privileged access, workload, data, and configuration security. 

• Improve logging, monitoring, and visibility across cloud services. 

• Identify cloud misconfigurations and security gaps and drive remediation. 

• Evaluate the security implications of new cloud services and integrations before adoption. 

• Implement appropriate secrets, keys, and privileged access management practices. 

Identity & Access Management  Drive a strong identity-first security model across the organization.  • Own and continuously improve Identity & Access Management practices. 

• Strengthen authentication, authorization, MFA, Conditional Access, and privileged access. 

• Apply least-privilege principles across users, administrators, systems, and services. 

• Improve joiner, mover, and leaver access processes. 

• Regularly review privileged and sensitive access. 

• Support the organization's evolution toward Zero Trust principles. 

Security Operations & Resilience  Build effective capabilities for detecting, responding to, and recovering from technology and security incidents.  • Maintain appropriate SIEM, EDR/XDR, vulnerability management, monitoring, and alerting capabilities. 

• Define and continuously improve incident response processes and playbooks. 

• Ensure security events are appropriately investigated, documented, and remediated. 

• Conduct root-cause analysis following major incidents. 

• Strengthen backup, disaster recovery, and business continuity readiness. 

• Periodically test recovery and incident-response capabilities. 

AI & Emerging Technology Security  Support Integrant's adoption of AI technologies while ensuring appropriate security and governance.  • Evaluate security risks associated with Generative AI and emerging technologies. 

• Establish appropriate security controls and guidelines for corporate AI usage. 

• Address risks related to sensitive data exposure, unauthorized AI tools, third-party AI platforms, and insecure integrations. 

• Partner with relevant stakeholders to enable innovation while maintaining appropriate security safeguards. 

Application Security – Future Growth Area  As Integrant's security maturity evolves, the role will partner with Engineering teams to expand security practices into the software development lifecycle.  Potential areas include:  • Secure SDLC 

• DevSecOps 

• Threat modeling 

• SAST / DAST 

• CI/CD security 

• Container and Kubernetes security 

• Secure coding practices 

Deep application security expertise is not a core requirement for joining the role, but previous exposure would be a strong advantage. 

Technical Leadership & Collaboration   • Act as a senior technical reference point for security topics. 

• Provide technical guidance and mentorship to IT team members. 

• Lead complex infrastructure, security, compliance, and technology projects. 

• Collaborate with Engineering, HR, Operations, and business stakeholders. 

• Communicate technology and security risks clearly to senior management. 

• Drive accountability for technical improvements and remediation initiatives. 

Formal people-management experience is considered a nice-to-have rather than a core requirement.