Information Security Lead

Position Purpose:

Working directly with the Vice President of Information Security, this role is designed for a highly autonomous security leader who combines strong technical depth with the ability to independently own and execute large-scale security initiatives.

Operating within a lean corporate team, you will serve as the primary technical project owner for the security program across multiple operating companies. This is a builder role, not a maintenance or oversight position.

You will be expected to architect, implement, and troubleshoot security controls from a blank canvas, while navigating business constraints across both corporate offices and 24/7 manufacturing environments. Success in this position requires an exceptional engineer who can own projects end-to-end, enforce a strict security framework mindset, and remain fully hands-on at the keyboard.

Essential Functions:

• Enterprise Tool Ownership: Take complete engineering ownership of the core security stack, including Microsoft 365, Microsoft Defender, Intune (MDM/MAM), Entra ID (Identity & Access Management), Rapid7, and Proofpoint.

• Strategic Security Architecture: Serve as an expert in security technologies and controls, driving decisions across infrastructure, identity, endpoint, and network security.

• Project Leadership: Own and lead end-to-end security projects to independently scope requirements, define and track project timelines, manage vendor relationships, coordinate with IT teams, and ensure on-time delivery without disrupting business operations.

• Incident Response & Root Cause Analysis: Investigate and perform root-cause analysis of issues including but not limited to: malware infections, data leakage, internal/external network abuse, and phishing attempts.

• Vulnerability Management & Remediation: Drive the internal vulnerability management program utilizing Rapid7, actively identifying, prioritizing, and remediating potential security exposures, misconfigurations, and noncompliance issues across the enterprise.

• Security Frameworks & Playbooks: Build and maintain security playbooks, standards, and procedures, acting as a creator of frameworks, not just a follower.

• Continuous Auditing: Perform technical audits on patch management, privileged access, endpoint detection and response, network devices, wired/wireless access, and user access.

Additional Responsibilities:

• Provide hands-on support across Active Directory, Entra, endpoint systems, network segmentation, and access control rules as needed.

• Support and mature security awareness and phishing simulation programs.