Senior Manager, Infrastructure & Security

Archwest Capital is looking for a Senior Manager, Infrastructure & Security to lead our infrastructure and cybersecurity capabilities and continue maturing our technology environment.

This is a hands-on leadership role spanning cloud and infrastructure, identity and access management, endpoint management, cybersecurity, networking, business continuity, and core technology operations. A major near-term focus is our cybersecurity hardening program: addressing findings from recent security assessments and putting sustainable controls and operating practices in place, with SOC 2 readiness as a longer-term objective.

The right person operates at both the strategic and technical levels – defining the roadmap, leading key initiatives, managing security and infrastructure partners, developing the team, and getting into the technical details when needed. This is an opportunity to shape and build the Infrastructure & Security function as Archwest continues to grow.

• Lead the remediation of findings and recommendations from cybersecurity assessments, penetration testing, vulnerability reviews, and other security initiatives.
• Develop and drive a prioritized security hardening roadmap, ensuring identified risks have clear owners, remediation plans, and target dates.
• Own key security capabilities including identity and access management, MFA, Conditional Access, privileged access, endpoint security, vulnerability management, logging, monitoring, and threat protection.
• Establish and maintain recurring security practices including access reviews, vulnerability scanning, patching, phishing testing, security awareness, configuration reviews, and control testing.
• Coordinate security monitoring and incident response activities and serve as a technical leader during cybersecurity incidents.
• Ensure security events and alerts are appropriately monitored, investigated, escalated, and resolved.
• Coordinate penetration testing, security assessments, and other independent testing and drive resulting findings through remediation.
• Partner with external security providers and specialists to strengthen detection, response, testing, and overall security posture.
• Support security reviews of new technologies, vendors, integrations, and architecture.

• Own the health, reliability, security, and continued evolution of Archwest's technology infrastructure.
• Lead the administration and improvement of our Microsoft environment, including Microsoft 365, Entra , Intune, Azure, and related technologies.
• Establish strong standards for endpoint configuration, device management, patching, software deployment, infrastructure configuration, and lifecycle management.
• Oversee networking, connectivity, collaboration, and other core infrastructure services.
• Develop and maintain an infrastructure roadmap aligned with business growth, security requirements, and Technology priorities.
• Identify opportunities to simplify the environment, reduce technical debt, improve reliability, and automate recurring work.
• Ensure infrastructure architecture, configurations, procedures, and operational processes are appropriately documented and maintained.

• Help establish and mature security policies, standards, procedures, and technical controls.
• Build sustainable security practices that support Archwest's longer-term compliance and SOC 2 readiness objectives.
• Maintain evidence of key security controls and activities, including access reviews, security testing, vulnerability remediation, training, and backup and recovery testing.
• Translate security risks and technical findings into practical recommendations, priorities, and remediation plans.
• Provide Technology leadership with clear visibility into security posture, material risks, remediation progress, and areas requiring investment.
• Own technology disaster recovery and infrastructure recovery planning.
• Ensure critical systems and data have appropriate backup, recovery, and resiliency capabilities and that recovery procedures are tested regularly.

• Establish disciplined operating practices across infrastructure and security, including monitoring, maintenance, change management, incident management, documentation, and escalation.
• Ensure technology issues are appropriately prioritized, owned, communicated, and driven through resolution.
• Proactively identify recurring issues and address root causes rather than relying on reactive support.
• Manage…