Senior IT Security Engineer — Hybrid, GRC & Incident Lead

INIT Innovations in Transportation, Inc.; Chesapeake (VA); Hybrid; USD 125,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Hybrid work model

401(k) match

Job summary

INIT Innovations in Transportation, Inc. is seeking a Senior IT Security Engineer to drive security controls, operations and GRC across corporate and transit deployments. You will establish security roadmaps, direct tools and architecture, and lead incident command and tabletop exercises.

Responsibilities include risk management, audits, and policy development while collaborating with IT Operations, engineering, and software teams. Hybrid work with travel to North America is expected.

Qualifications

• 10+ years of information security, risk management, or compliance.
• Experience directing information security strategy, governance and risk programs.
• Security certifications such as CISSP, CISM, CISA or CRISC or in progress.
• Experience with PCI DSS, SOC 2, ISO 27001, or NIST 800-53.
• Incident commander or leading incident response efforts.
• Ability to communicate security posture to senior management.
• Strong leadership and cross-functional collaboration.
• Familiarity with Azure and modern security tooling.

Responsibilities

• Define and drive security strategy, roadmaps, and governance with leaders.
• Direct threat intelligence, security operations, and incident response efforts.
• Lead tabletop exercises and translate findings into controls and playbooks.
• Manage risk, audits, and regulatory requirements across programs.
• Communicate risk and security posture to executives and customers.

Skills

Security strategy

Info security experience

Incident response

Leadership

Communication

Cross-functional collaboration

Governance & risk management

Cloud security (Azure)

Tools

Microsoft Azure

Cloudflare

Arctic Wolf

Tenable

Job description

INIT Innovations in Transportation, Inc. is seeking a Senior IT Security Engineer to drive security controls, operations and GRC across corporate and transit deployments. You will establish security roadmaps, direct tools and architecture, and lead incident command and tabletop exercises.

Responsibilities include risk management, audits, and policy development while collaborating with IT Operations, engineering, and software teams. Hybrid work with travel to North America is expected.