Hands-on Chief IT & Security Officer

Fullbay, Inc.; Phoenix (AZ); On-site; USD 180,000 - 230,000; Full time

Job summary

Fullbay, Inc. is seeking a Head of IT & Security to own the security program and IT operations end-to-end. You will design, implement, and run the program, act as primary responder for MDR alerts, and lead SOC 2 readiness and audits.

You will manage tooling, IAM, and device provisioning, while partnering with leadership to communicate risk posture and ensure incident containment and timely resolution. This role blends strategic governance with hands‑on execution.

Qualifications

• 7-10 years of combined IT operations and security experience.
• Experience managing alerts from MDR/EDR platforms and responding to incidents.
• Experience owning a compliance or regulatory program (SOC 2, ISO 27001, HIPAA, PCI-DSS, or equivalent).
• SOC 2 audit experience (Type I or II) preferred.

Responsibilities

• Design, build, and continuously improve Fullbay’s security program using NIST CSF 2.0.
• Oversee MDR platform operations and act as primary responder for escalated alerts.
• Lead SOC 2 readiness activities, control mapping, evidence collection, and audit coordination.
• Own security tooling stack configuration including MDR, MDM, email security, and anti‑phishing.

Skills

MDR/EDR

SOC 2

NIST CSF 2.0

CIS Controls v8.1

IAM

SSO

MFA

Google Workspace

ABM

NinjaOne

Proofpoint

Ironscales

Security incident response

Education

Bachelor's degree in Information Security/CS/IS

Tools

NinjaOne

Apple Business Manager

Google Workspace

Proofpoint

Ironscales

Job description

Fullbay, Inc. is seeking a Head of IT & Security to own the security program and IT operations end-to-end. You will design, implement, and run the program, act as primary responder for MDR alerts, and lead SOC 2 readiness and audits.

You will manage tooling, IAM, and device provisioning, while partnering with leadership to communicate risk posture and ensure incident containment and timely resolution. This role blends strategic governance with hands‑on execution.