Chief IT & Security Architect

NEPSE Trading; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Fullbay is hiring a Security and IT Manager to build and run the security program and the IT operations that keep the business running. You will own SOC 2 readiness, manage an MDR platform, and serve as the escalation point for incidents while also imaging laptops and provisioning devices.

You will lead policy, IAM, incident response, and vendor risk efforts, partnering with leadership to maintain strong risk posture and resilient operations.

Qualifications

• Experience building security programs from scratch and leading audits.
• Proven ability to respond to MDR alerts and manage incident response.
• Familiarity with IAM, MFA, SSO, and asset management tooling.

Responsibilities

• Security Program Ownership: design and improve Fullbay's security program using NIST CSF 2.0 and CIS Controls v8.1.
• Security Operations Oversight: manage MDR platform and triage incidents; on-call rotations.
• SOC 2 Readiness and Audit Management: lead readiness, evidence collection, and audit coordination for Type I/II.
• Tool and Platform Governance: own security tooling stack including MDR, MDM, email security, anti-phishing, training.
• Policy and Standards Development: write and enforce security policies and procedures.
• Identity and Access Management: oversee IAM posture across Google Workspace with passkeys, MFA, SSO, and privileged access controls.
• Incident Response: develop and own IR plan and lead post-incident reviews.
• Risk Management: maintain a risk register and communicate posture to leadership.
• Security Awareness: oversee phishing simulations and training cycles.
• Vendor and Third-Party Risk: assess suppliers and drive remediation.

Skills

Security program design

SOC 2 auditing

MDR operations

IAM management

Incident response

Education

Bachelor's degree in CS or related

Tools

NinjaOne

Google Workspace Admin

MDM

Apple Business Manager

Job description

Fullbay is hiring a Security and IT Manager to build and run the security program and the IT operations that keep the business running. You will own SOC 2 readiness, manage an MDR platform, and serve as the escalation point for incidents while also imaging laptops and provisioning devices.

You will lead policy, IAM, incident response, and vendor risk efforts, partnering with leadership to maintain strong risk posture and resilient operations.