Global Infrastructure & Cybersecurity Manager

Description

At Rand Technology we are seeking a hands-on Global Infrastructure & Cybersecurity Manager to lead the company's global infrastructure, cloud, network, cybersecurity, and IT operations.

This role is responsible for ensuring Rand's technology environment is secure, resilient, standardized, scalable, and operationally mature as the company continues its global growth.

The Manager will own the operational health and security of Rand's global infrastructure, including Microsoft Azure production environments, Microsoft 365/Entra , global office networks, endpoint security, email security, vulnerability management, security monitoring, and disaster recovery.

The role will lead internal IT operations resources and manage key technology and security partners while working closely with the CIO to execute Rand's infrastructure and cybersecurity roadmap and mature controls.

* This role is onsite based in our Headquarters in Irvine, CA

* Please note that this role is not eligible for visa sponsorship.

• Own the availability, performance, security, and operational health of Rand's global IT infrastructure and Azure production environment.
• Establish and enforce global infrastructure standards across all offices, including network architecture, firewalls, switching, Wi-Fi, Internet connectivity, segmentation, redundancy, monitoring, and secure remote access.
• Ensure new and existing offices follow standardized network, security, documentation, configuration, and support requirements.
• Manage Azure infrastructure operations and MSP relationships, including availability, backup, recovery, monitoring, capacity, security, and cost optimization.
• Maintain current architecture diagrams, configurations, inventories, operating procedures, and disaster recovery documentation.
• Establish appropriate monitoring, alerting, escalation, and change-management practices for production infrastructure.
• Lead infrastructure modernization initiatives including cloud, SD-WAN/SASE, Zero Trust, automation, and other technologies as appropriate.

• Own and continuously improve Rand's cybersecurity operations and security posture.
• Manage and optimize security platforms and partners, including Crowd Strike MDR/EDR, Abnormal Security, Microsoft security capabilities, vulnerability management, and security monitoring/SOC services.
• Own endpoint security standards and ensure corporate endpoints meet required security, patching, encryption, configuration, and compliance standards.
• Establish vulnerability identification, prioritization, remediation, and reporting processes with defined remediation targets.
• Lead security incident response and serve as the primary IT escalation point for cybersecurity incidents.
• Coordinate penetration testing, vulnerability assessments, security audits, and remediation activities.
• Maintain and periodically test incident response, disaster recovery, backup, and business continuity capabilities.
• Ensure appropriate security controls for privileged accounts, MFA, identity and access management, conditional access, administrative access, service accounts, and access reviews.
• Manage third-party technology/security risk in partnership with appropriate business functions.

• Own the company's security awareness program using KnowBe4 or equivalent, including employee training, phishing simulations, reporting, and follow-up.
• Ensure new employees receive required cybersecurity awareness training as part of onboarding.
• Establish measurable security-awareness KPIs and identify areas requiring additional training or controls.
• Partner with People & Culture and business leaders to promote security awareness and accountability across the organization.

• Lead and develop the global IT infrastructure/helpdesk team and effectively manage outsourced technology partners.
• Establish operational SLAs, escalation procedures, standards, and accountability across internal and external resources.
• Maintain a regular infrastructure and cybersecurity dashboard for the CIO covering availability, security incidents, vulnerabilities, patch compliance, endpoint compliance, phishing/security awareness, backup/DR health, and major risks.
• Manage infrastructure and cybersecurity budgets, contracts, licensing, renewals, and vendor performance.
• Participate in technology planning for acquisitions, new offices, expansions, and other business…