Senior IT Security Engineer: Strategy & GRC Lead

Init-Innovations-in-Transportation-In; Chesapeake (VA); Hybrid; USD 125,000 - 150,000; Full time

Benefits offered by this job

Vacation days 15

Holidays 11

Parental leave

Health insurance

Dental insurance

401(k) match

Life insurance

Disability insurance

Flexible Spending Accounts

Education assistance

Job summary

INIT Innovations in Transportation, Inc. is seeking a Senior IT Security Engineer to drive security controls, security operations, and GRC across INIT's internal corporate infrastructure and customer-facing transit technology deployments.

This role contributes to security architecture, operations, and control framework for PCI DSS, SOC 2, and ISO 27001, working with IT teams and reporting to the Director of IT.

Qualifications

• 10+ years of experience in information security, risk management, or compliance with increasing responsibility.
• Proven experience establishing and directing information security strategy, governance, and risk management programs.
• Security certification such as CISSP, CISM, CISA, or CRISC, or actively pursuing one.
• Experience implementing or designing systems within PCI DSS, SOC 2, ISO 27001, or NIST 800-53.
• Experience serving as incident commander or leading incident response efforts.
• Ability to communicate security posture, risk, and compliance status to senior management.
• Strong leadership, problem-solving, and critical thinking abilities.
• Ability to collaborate across IT Operations, IT Systems Engineering, and software development teams.

Responsibilities

• Establish security vision, strategy, and roadmaps with the Director of IT.
• Direct the selection and lifecycle of security tools and infrastructure security direction.
• Set identity access and security hardening standards across the environment.
• Evaluate security requirements and architecture for customer projects and proposals.
• Identify strategic trends affecting security posture and customer trust.
• Evaluate and guide secure adoption of AI tools balancing productivity and risk.
• Act as incident commander or alternate during security incidents.
• Lead tabletop exercises and translate findings into playbooks and controls.
• Communicate security posture and incident status to senior management and customers.
• Oversee security strategy across customer projects and contractual obligations.
• Direct risk management program and maintain PCI DSS, SOC 2, ISO 27001 mappings.
• Coordinate audits, remediation, and regulatory requirements.
• Lead security policy development and third-party vendor risk management.
• Drive security awareness training and risk-based vulnerability prioritization.

Skills

Information security

Governance

Risk management

Compliance

Incident response

Tools

Microsoft Azure

Cloudflare

Arctic Wolf

Tenable

Job description

INIT Innovations in Transportation, Inc. is seeking a Senior IT Security Engineer to drive security controls, security operations, and GRC across INIT's internal corporate infrastructure and customer-facing transit technology deployments.

This role contributes to security architecture, operations, and control framework for PCI DSS, SOC 2, and ISO 27001, working with IT teams and reporting to the Director of IT.