Cybersecurity Lead

Description

Job Summary:

Experienced Cybersecurity Lead to protect our multi-site infrastructure and drive key cybersecurity initiatives. This is a hands‑on, hybrid role that balances technical execution with security governance and compliance. Reports directly to the IT Director to ensure our systems remain secure, resilient, and compliant.

• Monitor and secure network, server, and cloud infrastructure (Microsoft 365, Azure, AWS)
• Lead enterprise cybersecurity initiatives, strategy deployment, and security‑related projects (e.g., endpoint protection, MFA, vulnerability mitigation, secure configurations)
• Lead cybersecurity response, triage, root cause analysis, and post‑incident coordination during major incidents
• Coordinate third‑party penetration testing, vulnerability tracking, and vendor risk assessments
• Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires
• Conduct internal audits and implement security controls across cloud and on‑prem environments
• Maintain and optimize endpoint security tools EDR/MDR
• Support phishing detection, remediation, and user awareness initiatives
• Maintain, optimize, and enforce Cybersecurity documentation, procedures, and policies
• Collaborate with IT Director on future roadmap items, including SIEM implementation and security compliance frameworks
• Stay current on emerging threats and recommend proactive measures.

• 5+ years of hands‑on experience in Cybersecurity roles
• Strong knowledge of:
  Firewalls, VPNs, and Microsoft 365 security controls
• Solid experience with Windows Server, Azure, and AWS environments
• Proven experience in managing security incidents and implementing technical controls
• Solid understanding of access control, encryption, patch management, and system hardening
• Familiarity with industry‑standard cybersecurity frameworks (e.g., NIST, CIS Controls, ISO 27001) and applicable aviation security guidance (TSA/FAA directives)
• Excellent analytical, problem‑solving, and decision‑making skills
• Strong written and verbal communication skills to interact effectively with department leaders

• Certifications such as Security+, MS‑500, Cisco Security, CISSP, or similar are a plus
• Experience working in multi‑site environment
• Familiarity with EDR platforms, phishing response, and cloud identity protection