Position Title: Senior Lead Cybersecurity Location: Dania, FL (Hybrid) Position Summary: The Senior Lead Cybersecurity professional plays a critical role in the daily execution and supervision of enterprise security operations. This individual serves as the primary hands-on technical leader responsible for safeguarding systems, data, and customers within a cloud-native environment and extensive Software as a Service (SaaS) interconnectivity. The ideal candidate is an experienced leader and technical expert, highly proficient in Development, Security, and Operations (DevSecOps) practices. This role ensures effective application of security controls, acts as the primary escalation point for operational security issues, and focuses on implementing technical solutions that balance business agility with security imperatives. Essential Responsibilities: Serve as a trusted security advisor to leadership, supporting business decisions with appropriate risk considerations. Develop and maintain key risk indicators to measure cybersecurity risk and present security threats to senior and technology leadership. Lead, mentor, and guide a small team of security professionals as the security function grows. Maintain hands-on experience with Google Cloud Platform (GCP) security services and architecture. Utilize containerization and orchestration technologies (Docker, Kubernetes/GKE) and/or serverless environments (Cloud Functions, Cloud Run). Implement identity and access management within GCP, including Cloud IAM, workload identity federation, SAML, and OIDC. Conduct risk assessments and map controls to frameworks such as NIST CSF, CIS Controls, ISO 27001, and communicate risk in clear business terms. Use the MITRE ATT OR a High School Diploma/GED and at least four (4) years of relevant work experience in Information Security, Computer Science, Business, or related fields. Four (4) years of progressive IT or cybersecurity experience, including at least two (2) years as a direct security practitioner. One (1) year of experience leading cybersecurity teams. Certified Cloud Security Professional (CCSP). Certified Information Systems Security Professional (CISSP). Certified Information Privacy Professional (CIPP). Hands-on experience with cloud-native environments such as Google Cloud Platform (GCP). Strong understanding of cloud security architectures (Zero Trust, Secure SDLC, IaC security, DevSecOps). Ability to embed security into SDLC and CI/CD pipelines using automated validation and Infrastructure-as-Code security tooling. Knowledge of frameworks including NIST CSF, ISO 27001, and CIS Controls. Excellent written and verbal communication skills with an ability to translate risk for non-technical audiences. Demonstrated experience building and scaling security processes from the ground up. Ability to travel occasionally (up to 10%). Must pass a ten (10) year background check. Must be legally eligible to work in the United States. This position is not eligible for visa sponsorship. Preferred Experience and Qualifications: Experience in technology, travel, retail, airline, or other regulated industries. Ability to work autonomously and drive initiatives in a fast-paced environment. Experience in matrixed or affiliate organizational models. Familiarity with container security, API security, IAM, and zero-trust implementations. Proven ability to influence stakeholders and drive security improvements. One or more additional certifications such as CISM, CRISC, CCSK, CISA, or similar. Use of automated tools (including ChatGPT) during the interview process will disqualify candidates.
Read Less