Cybersecurity Lead / Security Engineering & Compliance Lead
Irth Solutions2 days ago
Remote, United States or Remote, CanadaStaff+
Base Salary
$195k - $195k/yr
Responsibilities
- Own vulnerability management from security finding triage and prioritization through assignment, tracking, remediation, and executive reporting.
- Lead security incident response from detection and investigation through containment, remediation, post-incident review, communications, and tabletop exercises.
- Own cloud security posture and identity and access controls across AWS, Microsoft Azure, Microsoft Entra ID, and AWS IAM.
- Develop and enforce security policies and technical controls aligned with NIST Cybersecurity Framework, ISO 27001, and SOC 2 Type II.
- Partner with GRC on audit readiness, evidence collection, control remediation, customer security questionnaires, and security reviews.
- Manage penetration testing engagements, security vendors, customer communications, and cybersecurity due diligence for acquisitions.
Requirements
- 8+ years of experience in cybersecurity engineering or security operations, including at least 3 years leading a security program or function.
- Hands-on cloud security experience across AWS and Microsoft Azure, including IAM, cloud network security controls, logging, monitoring, audit trails, AWS CloudTrail, Microsoft Entra logs, and tools such as Wiz.
- End-to-end vulnerability management experience in partnership with engineering teams, including identifying, prioritizing, assigning, tracking, and driving remediation.
- Experience leading security incident response and communicating clearly with executives and customers during high-pressure situations.
- Working knowledge of SOC 2 Type II, ISO 27001, and NIST Cybersecurity Framework, including serving as a technical control owner through at least one SOC 2 Type II audit.
- Ability to review application code, infrastructure-as-code, and Linux and Windows server configurations to assess risk and validate remediation.
- Preferred experience with utilities, pipelines, energy providers, critical infrastructure, TSA pipeline security directives, NERC CIP, Canadian privacy requirements including Quebec’s Law 25, AI-enabled or LLM-powered SaaS workflows, mergers and acquisitions, and relevant industry certifications.
Benefits
- Remote workplace with a one-time work-from-home stipend; hybrid employees may use the Columbus, Ohio office.
- Medical, dental, and vision coverage.
- 401(k) plan with company match.
- Flexible PTO and company-paid holidays.
- Life insurance, pet insurance, employee discounts, and perks programs.
- Company events and connection opportunities, including monthly team lunches, volunteer outings, and quarterly gatherings.
About Irth Solutions
Irth Solutions builds cloud-based software used by utilities and other critical-infrastructure operators to manage 811 one-call tickets, land rights, risk, and mobile field work, with reporting and analytics. Its products are sold as SaaS and include AI-driven risk modeling for pipeline asset integrity. Founded in 1985 and headquartered in Columbus, Ohio, the company is privately held and owned by Gauge Capital.