Head of Information Security, Gecko Robotics

• Deep understanding of security protocols, cryptography, authentication, authorization, and security frameworks
• Experience establishing and maintaining Information Security compliance with relevant frameworks for both commercial and U.S. Government business (e.g. NIST 800-171/2, NIST 800-161, FedRAMP Moderate/High, DoD IL4/5, CMMC, ISO27001, SOC2)
• Associate or Bachelor's degree in Computer Science, Information Technology, System Administration, or a closely related field (or equivalent experience)
• 5-7 years of Information Security experience with advancing responsibilities
• Outstanding oral and written communication skills
• Operational and People leadership experience, with proven experience managing people
• 1-3 years of startup experience
• 1-3 years of experience administering a rapidly scaling network infrastructure
• 1-3 years of experience managing Information Security compliance particular to U.S. Government (preferably DoD) customers
• Effective stakeholder management
• Proven experience in a senior information security role, preferably within the technology or robotics industry
• Experience managing MSSP
• Experience with DoD incident response and reporting requirements and procedures (DFARS 252.204-7012)

Desirable

• As the Head of Information Security, you will be responsible for all of the strategic and operational decisions that impact the Information Security of the people, process, Hardware and Software that powers Gecko
• As the Head of InfoSec, you will embed deeply with Information Technology, Software Platform and in the business to understand challenges and gaps in workflows, and ensure the security, stability, and scalability of Geckos infrastructure
• The Head of InfoSec will also be a key driver of internal data and working with Gecko leadership to help maximize resources
• Additionally, you are process minded but action oriented, and know how to walk the line of immediate fixes and scaling for the future
• Identify and assess security risks, and develop strategies to mitigate them
• Conduct regular security audits and penetration testing to ensure the robustness of systems
• Manage the response to security incidents and coordinate recovery processes
• Create, update, and enforce security policies, standards, and guidelines
• Ensure compliance with industry standards and regulations such as ISO 27001, GDPR, etc
• Embed deeply with Business Stakeholders to define InfoSec Roadmap and OKRs
• Create processes and infrastructure to respond quickly and effectively to the evolving CyberSecurity needs of the business
• Build the Information Security team at Gecko, hiring, managing performance and promoting Information Security team members
• Negotiate and manage relevant vendors as well as budgets to ensure optimal investments
• Provision and management of Gecko corporate devices
• Support of the technical operations and maintenance needs of remote offices
• Define and monitor security controls on Gecko infrastructure managed by IT