Cybersecurity Manager, Platform Science

• The ideal candidate will be a subject matter expert (SME) in cyber security - AWS infrastructure, endpoint security, email security, Security Operations Center, Firewalls, VPN, SOC2/ISO27001 Compliance, and privacy regulations
• Proven experience as a cybersecurity department manager
• Familiarity with cybersecurity applications and tools such as:
• Darktrace, Wiz, Palo Alto Prisma, Fortinet, Global Protect, Crowdstrike, Cortex XDR,
• Proven experience managing SOC2 and ISO 27001 compliance in a SaaS or technology company
• Strong knowledge of GDPR, US privacy laws, and evolving global privacy requirements
• Expertise in audit management, including serving as a primary point of contact for external auditors
• Experience with evidence collection automation and managing compliance cadence activities
• Ability to integrate newly acquired teams and systems into existing security and compliance processes
• Experience working with Windows environments and mobile device management for PCs
• Strong communication and leadership skills, with the ability to work across departments and with external stakeholders

Desirable

• We are seeking an experienced Cyber Security Manager to lead and oversee cybersecurity and compliance efforts across our SaaS business
• This role will be key in maintaining our company's leadership in cyber security within the telematics industry and supporting newly acquired teams and technologies
• Cybersecurity Leadership: Collaborate with cross-functional teams to ensure best practices in cybersecurity are maintained across all business areas, including acquisitions and newly integrated environments
• Acquisition Cyber Workstream: Provide subject matter expertise in merging acquisition employees into our cyber security framework (endpoint, firewall, IAM, etc.)
• SOC Point of Contact: POC for external SOC provider, liaison with internal teams, track findings and mitigations; work with internal teams to develop timelines and SLA’s for resolving posture findings. Provide SME in onboarding of vendor
• Consulting for IT and Security Teams: Provide SME guidance to IT for the onboarding of newly acquired Windows environments and support the integration of mobile device management for new PC users
• SOC2 and ISO Compliance Management: Oversee and manage the SOC2 and ISO compliance processes throughout the year (weekly, monthly cadence), ensuring continuous readiness and maintaining certification status. Committees include but not limited to:
• Policy Review and Updates: Regularly review, update, and improve security and privacy policies to ensure they align with the latest industry standards and regulatory requirements, including GDPR and US privacy laws
• Evidence Collection Automation: Act as the SME in automating and streamlining evidence collection for audits and compliance processes
• Acquisition Integration: Lead the onboarding of newly acquired businesses into our SOC2 and ISO compliance framework, ensuring a smooth transition and full integration into existing processes
• GDPR and Privacy Compliance: Ensure the business stays compliant with evolving GDPR and US privacy regulations, advising internal stakeholders on necessary changes or improvements
• Continuous Improvement of Cybersecurity and Privacy Posture: Work with cross functional teams to identify opportunities to improve cybersecurity posture, response and compliance to include tooling, automation, workflows and testing