Strengthen security across Integrant’s infrastructure, cloud services, endpoints, identities, and corporate technology ecosystem.
•
Continuously assess the organization’s cybersecurity posture and identify vulnerabilities and control gaps.
•
Design and implement appropriate preventive, detective, and corrective security controls.
•
Own vulnerability management, security hardening, remediation, and patching priorities.
•
Strengthen endpoint, network, identity, email, and cloud security.
•
Implement security principles including Zero Trust, least privilege, defense in depth, and secure-by-default configurations.
•
Improve security monitoring, detection, investigation, and response capabilities.
•
Lead or support cybersecurity incident investigation, containment, root-cause analysis, and remediation.
•
Evaluate cybersecurity technologies and recommend improvements to the organization’s security architecture.
Information Security, Governance, Risk & Compliance (GRC)
Ensure Integrant maintains effective information security governance while meeting business, customer, and compliance expectations.
•
Support and continuously mature Integrant’s Information Security Management System (ISMS).
•
Lead or support ISO 27001 activities, SOC || including risk assessments, control implementation, audits, remediation, and continuous improvement.
•
Maintain and improve information security policies, standards, procedures, and technical controls.
•
Conduct information security risk assessments and drive appropriate risk-treatment plans.
•
Maintain visibility of security risks, control gaps, remediation actions, and exceptions.
•
Support internal and external security audits.
•
Participate in customer security assessments and security questionnaires when required.
•
Assess security risks associated with vendors, SaaS platforms, and third-party technology providers.
•
Establish meaningful security metrics and provide management with visibility into key risks and improvements.
Ensure that Integrant’s cloud and SaaS environments remain secure, well-governed, and appropriately monitored.
•
Establish and maintain secure configurations across Azure, AWS, Microsoft 365, and other SaaS platforms.
•
Strengthen cloud identity, privileged access, workload, data, and configuration security.
•
Improve logging, monitoring, and visibility across cloud services.
•
Identify cloud misconfigurations and security gaps and drive remediation.
•
Evaluate the security implications of new cloud services and integrations before adoption.
•
Implement appropriate secrets, keys, and privileged access management practices.
Identity & Access Management
Drive a strong identity-first security model across the organization.
•
Own and continuously improve Identity & Access Management practices.
•
Strengthen authentication, authorization, MFA, Conditional Access, and privileged access.
•
Apply least-privilege principles across users, administrators, systems, and services.
•
Improve joiner, mover, and leaver access processes.
•
Regularly review privileged and sensitive access.
•
Support the organization’s evolution toward Zero Trust principles.
Security Operations & Resilience
Build effective capabilities for detecting, responding to, and recovering from technology and security incidents.
•
Maintain appropriate SIEM, EDR/XDR, vulnerability management, monitoring, and alerting capabilities.
•
Define and continuously improve incident response processes and playbooks.
•
Ensure security events are appropriately investigated, documented, and remediated.
•
Conduct root-cause analysis following major incidents.
•
Strengthen backup, disaster recovery, and business continuity readiness.
•
Periodically test recovery and incident-response capabilities.
AI & Emerging Technology Security
Support Integrant’s adoption of AI technologies while ensuring appropriate security and governance.
•
Evaluate security risks associated with Generative AI and emerging technologies.
•
Establish appropriate security controls and guidelines for corporate AI usage.
•
Address risks related to sensitive data exposure, unauthorized AI tools, third-party AI platforms, and insecure integrations.
•
Partner with relevant stakeholders to enable innovation while maintaining appropriate security safeguards.
Application Security – Future Growth Area
As Integrant’s security maturity evolves, the role will partner with Engineering teams to expand security practices into the software development lifecycle.
•
Container and Kubernetes security
Deep application security expertise is not a core requirement for joining the role, but previous exposure would be a strong advantage.
Technical Leadership & Collaboration
•
Act as a senior technical reference point for security topics.
•
Provide technical guidance and mentorship to IT team members.
•
Lead complex infrastructure, security, compliance, and technology projects.
•
Collaborate with Engineering, HR, Operations, and business stakeholders.
•
Communicate technology and security risks clearly to senior management.
•
Drive accountability for technical improvements and remediation initiatives.
Formal people-management experience is considered a nice-to-have rather than a core requirement.