Cybersecurity Lead

Role: Cybersecurity Lead

Location: HybridRole (Boston, MA, West Palm Beach, FL) / Remote with Travel

Duration: 6 Month Contract To Hire.

Position Summary

The Cybersecurity Lead is responsible for developing theorganization's cybersecurity strategy, ensuring the confidentiality, integrity,and availability of company and customer information. This role providestechnical leadership across product security, enterprise security, cloudsecurity, and compliance while partnering with engineering, IT, product management,and operations to embed security throughout the organization. The CybersecurityLead will play a critical role in protecting the company's physical securityand identity management solutions from emerging cyber threats.

Key Responsibilities

·        Develop Client’scybersecurity strategy aligned with business objectives and industry bestpractices.

·        Lead role inprotecting the company and customers emerging cyber threats and to position thecompany at the forefront of security and compliance within the physicalsecurity industry

·        Establish and maintainsecure software development lifecycle (SSDLC) practices

·        Ensure thearchitectures for cloud, on-premises, and hybrid product deployments includeall necessary security design requirements

·        Collaborate with productmanagement PAM and Zero Trust Security initiatives

·        Support customersecurity assessments, security questionnaires, audits and RFP responses.

·        Establish securitymetrics, KPIs and executive reporting to communicate cyber risk and programeffectiveness

·        Build relationshipswith external security researchers, auditors and strategic technology partners

Qualifications

Required

·        Bachelor's degree inCybersecurity, Computer Science, Engineering, Information Systems, or relatedfield.

·        8+ years ofcybersecurity experience with increasing technical and leadershipresponsibilities.

·        Experience securingenterprise and cloud environments (AWS, Azure, or Google Cloud).

·        Strong knowledge ofnetwork security, application security, identity management, encryption, PKI,and secure authentication technologies.

·        Experienceimplementing security controls aligned with NIST CSF, CIS Controls, or ISO27001.

·        Experience withvulnerability management, penetration testing, SIEM, EDR, and securitymonitoring tools.

·        Knowledge of DevSecOpspractices, CI/CD security, and infrastructure-as-code security.

·        Strong understandingof security incident response and digital forensics.

·        Excellentcommunication skills with the ability to explain technical risks to executiveleadership and customers.

Preferred

·        Master's degree inCybersecurity, Computer Science, or Engineering.

·        Professionalcertifications such as CISSP, CISM, CCSP, GIAC, Security+, or Azure/AWSSecurity certifications.

·        Knowledge of embeddedsystems security, firmware security, and secure device lifecycle management.

·        Experience workingwithin regulated industries or government environments.

Technical Skills

·        Zero TrustArchitecture

·        Cloud Security

·        Secure SoftwareDevelopment Lifecycle (SSDLC)

·        Security Information andEvent Management (SIEM)

·        Endpoint Detection& Response (EDR)

·        VulnerabilityManagement

·        Threat Modeling

·        Penetration Testing

·        Security RiskAssessments

·        Incident Response

·        PKI, TLS, Encryption,and Key Management

·        Microsoft Defender,Microsoft Sentinel, CrowdStrike, Splunk, or similar platforms

Success Measures

·        Reduced organizationalcyber risk through proactive security initiatives

·        Timely remediation ofcritical vulnerabilities measured against defined SLAs.

·        Compliance process,with customer and regulatory security requirements built into product releasesrather than retrofitted.

·        Improved securityawareness and adoption of security best practices throughout the organization.

·        Successful attainmentand maintenance of relevant certifications (ISO 27001, SOC 2, and others asrequired by customers and markets).

·        Reduced turnaroundtime on customer security questionnaires, audits, and RFP responses.

·        Effective,well-coordinated response to security incidents across both product andenterprise IT environments, with minimal business impact.

·        Improved securityawareness and adoption of secure-by-design practices across engineering, IT,and the wider organization.