Key objectives

• Build a viable security system across the core domains: IAM (access management, MFA, SSO), infrastructure security (cloud, services, network), foundational SDLC/AppSec (security in the development process and in the code), and the processes and training around them. We expect you to start with a proper diagnosis of our landscape — and design the system for this company, rather than replaying a project from a previous job.
• Own security risks and speak both languages: business language with the CTO and CEO — risk, cost, and priorities; technology language with developers and infrastructure teams — architecture, trade-offs, and practical solutions.
• Make the right build-vs-buy calls: you know the security product market well enough to tell when a problem needs a tool, when a simpler method will do, and when the problem isn't in the tooling at all — it's in habits and heads.