Senior Manager - Infrastructure & Cybersecurity

CAW Studios:

You will be responsible for the uptime, performance, and operational cost of a large-scale cloud platform or some of our SaaS-based products. You will make daily and weekly operational decisions to improve uptime while reducing costs. You will drive improvements by gaining an in-depth knowledge of the products in your responsibility and applying the latest emerging trends in the cloud and SaaS technologies. All your decisions will be focused on providing the best in class service to the users of our SaaS products.

Our organization relies on its central engineering workforce to develop and maintain a product portfolio of several different startups. As part of our engineering, you'll get to work on several different products every quarter. Our product portfolio continuously grows as we incubate more startups, which means that different products are very likely to use different technologies, architecture & frameworks - a fun place for smart tech lovers! 

Job Overview:

As the Senior Manager of Infrastructure & Cybersecurity, you will be responsible for implementing, maintaining, and overseeing the organization’s cybersecurity program & Infrastructure (tools, technologies, services, infrastructure) to ensure that information security standards, practices, and controls are in place to effectively manage risk to the enterprise and improve the company’s overall security posture. You will be responsible for managing your team and overseeing the execution of projects and initiatives for Celito customers. You will help develop and implement security initiatives and standards, conduct and oversee monitoring, and ensure compliance with regulatory and internal standards including incident response and investigations related to policy violations, security breaches, threats, and attacks. You will be a strategic technical leader, mentoring team members while partnering with other leaders to advance cybersecurity processes across the organization.

Responsibilities and Duties: 

• Collaborate with clients to understand their IT needs, focusing on infrastructure and security, and establish strategic IT plans that align with their business objectives and compliance requirements.
• Lead the design and implementation of secure and robust IT infrastructures, ensuring they support the clients’ operations and research activities effectively.
• Develop and implement comprehensive security strategies, including but not limited to, risk assessments, incident response plans, and ongoing security monitoring.
• Drive the adoption of best practices in IT governance, cybersecurity frameworks, and regulatory compliance (such as HIPAA, GDPR, and other relevant standards).
• Manage and mentor a team of IT professionals, fostering a culture of excellence, accountability, continuous improvement, and professional growth.
• Stay abreast of technological advancements, cybersecurity trends, and regulatory changes that may impact our clients, and adjust strategic plans accordingly.
• Ensure customer satisfaction through exceptional service delivery, proactive communication, and the ability to translate technical challenges into business impact.
• Collaborate with cybersecurity operations team to ensure rapid response to potential threats and alerts, and develop standards and guidelines for response and remediation.
• Serve as the main point of contact for clients and Celito leadership team on managing the status of projects and the operational state of client infrastructure and cybersecurity program.
• Lead and perform information security and vulnerability assessments. This will include scanning, prioritization, and remediation of discovered vulnerabilities as well as performing regular penetration testing.
• Oversee implementation and maintenance of an Incident Response Program including developing IR playbooks.
• Work with and actively engage security service providers to deliver necessary services and manage contract requirements and service level agreements.
• Serve as lead advisor on cybersecurity matters to ensure appropriate levels of security are integrated into process designs and architecture.
• Develop and implement company-wide/departmental information security training and awareness programs.
• Monitor internal and external policy compliance to ensure that vendors and employees understand the company’s cybersecurity policies and operate within that framework.
• Work closely with the business to promote and support the cybersecurity initiatives of the organization.
• Performs other duties as assigned.

Qualifications: 

• 7+ years developing infrastructure & security programs, managing security solutions, and projects.
• Must have experience with the industry's best tools such as Palo Alto Firewall, Meraki, Rapid 7/Arctic Wolf/AlienVault, Crowdstrike EDR, Mimecast/DarkTrace, Tenable, CyberArk, Zscalar, AZURE/AWS security, Office 365 expertise, etc.,
• Must be a fluent communicator, able to present to Executive teams, an Independent Thinker, and able to define Cybersecurity Strategy
• Must have built or run a SOC and managed a team of cybersecurity experts & engineers supporting projects/operations.
• Preferably has industry standard CISSP certifications, CISA, Security +, SSCP, etc.,
• Must have performed NIST/ISO-based full assessments, and be able to articulate findings, build remediation plans, and present plans to scale up security posture. 
• Preferably has Life Sciences experience or consulting experience working with large & medium-sized companies. 
• Knowledge of information security frameworks, best practices, and administrative, physical, and technical safeguards (experience with common security frameworks such as NIST preferred)
• Experience working with Security Incident and Event Management (SIEM) tools, endpoint detection and response tools, vulnerability management suites, and various security solutions
• Strong technical background and knowledge of network and systems security, system and network configuration, and application security.
• Experience with incident response management, next-gen firewalls, web application firewalls, multi-factor authentication, data loss prevention, and disaster recovery.
• Excellent organizational, communication, and customer service skills with active listening skills.
• Knowledge of regulatory requirements such as the California Consumer Privacy Act (CCPA), Sarbanes-Oxley (SOX), and quality guidelines (GxP) is a plus.

About CAW Studios:

 CAW Studios is a Product Engineering Studio. WE BUILD TRUE PRODUCT TEAMS for our clients. Each team is a small, well-balanced group of geeks and a product manager who together produce relevant and high-quality products. We believe the product development process needs to be fixed as most development companies operate as IT Services. Unlike IT Apps, product development requires Ownership, Creativity, Agility, and design that scales.

Know More About CAW Studios:

Website: https://www.cawstudios.com/">https://www.cawstudios.com/

Benefits: Startup culture, powerful Laptop, free snacks, cool office, flexible work hours and work-from-home policy, medical insurance, and most importantly - the opportunity to work on challenging cutting-edge problems.