Head of Cyber Risk & Security Engineering

Brobston Group LLC; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Brobston Group LLC leads a security engineering function to safeguard systems and embed security across digital and physical environments. You will drive risk assessment, prioritization, controls, and enterprise-wide security awareness with measurable outcomes.

As a technical leader, you will influence remediation, security strategy, and adoption of DevSecOps, IAM governance, and infrastructure-as-code across the organization.

Qualifications

• Minimum 10 years of cyber security engineering experience with hands-on leadership.
• Proven experience across cloud platforms (Azure, AWS, GCP) and security tech.
• Proficiency in secure software development, DevSecOps, and IaC.
• Deep knowledge of IAM, DLP, encryption, and secure communications.
• Experience applying NIST 800-53, ISO 27001, CIS; PCI DSS preferred.
• Bachelor’s degree and security certifications preferred.

Responsibilities

• Lead implementation and integration of security controls across cloud, network, endpoints, and physical environments.
• Develop and operate continuous risk assessment, monitoring, and remediation programs.
• Translate technical risks into actionable requirements for stakeholders across engineering, operations, retail, and legal.
• Build and scale security awareness and training programs to drive measurable behavior change.
• Drive identity and access governance, ensuring appropriate access while minimizing business friction.
• Embed security into CI/CD pipelines and infrastructure through DevSecOps and infrastructure-as-code practices.

Skills

Cloud platforms

Networks

Endpoints

SIEM

EDR

PAM

DevSecOps

Terraform

Ansible

IAM

DLP

Encryption

Secure communications

NIST 800-53

ISO 27001

CIS

PCI DSS

CISSP

CISM

CISA

Leadership

Education

Bachelor's degree in computer science or related field

Tools

Terraform

Ansible

Job description

Brobston Group LLC leads a security engineering function to safeguard systems and embed security across digital and physical environments. You will drive risk assessment, prioritization, controls, and enterprise-wide security awareness with measurable outcomes.

As a technical leader, you will influence remediation, security strategy, and adoption of DevSecOps, IAM governance, and infrastructure-as-code across the organization.