Global Infrastructure & Cybersecurity Manager

Rand Technology LLC•Irvine, CA

1d•Onsite

About The Position

Rand Technology is seeking a hands-on manager to lead the company's global infrastructure, cloud, network, cybersecurity, and IT operations. The role is responsible for keeping Rand's technology environment secure, resilient, standardized, scalable, and operationally mature as the company grows globally. The manager owns the operational health and security of global infrastructure, including Microsoft Azure production environments, Microsoft 365/Entra ID, office networks, endpoint and email security, vulnerability management, security monitoring, and disaster recovery. The position leads internal IT operations resources and manages technology and security partners, working closely with the CIO to execute the infrastructure and cybersecurity roadmap and mature controls. This position is onsite at Rand Technology's headquarters in Irvine, California, and is not eligible for visa sponsorship.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.
At least 8 years of progressive infrastructure, network, or security experience, including at least 3 years in a leadership or management capacity.
Demonstrated experience managing multi-site or global infrastructure and cybersecurity environments.
Hands-on experience managing or governing Microsoft Azure production environments.
Strong experience with Microsoft 365/Entra ID, networking, endpoint security, vulnerability management, identity security, and incident response.
Experience managing MDR/SOC, MSP, cloud, and other outsourced technology providers.
Experience implementing security policies, standards, risk management, and audit controls.
Experience with security awareness and phishing simulation programs such as KnowBe4.
Experience with disaster recovery, backup/recovery testing, and business continuity.
Strong knowledge of Microsoft Azure, Microsoft 365 and Entra ID security and administration.
Strong experience with MDR/EDR, email security, vulnerability management, IAM/MFA, SIEM/SOC operations, and incident response.
Strong networking foundation, including WAN/LAN, SD-WAN, firewalls, Wi-Fi, VPN, segmentation, and Zero Trust principles.
Demonstrated ability to establish global technology standards across multiple offices and regions.
Understanding of security governance, risk management, policies, controls, and audit requirements.
Ability to work across strategy, governance, and hands-on technical problem-solving.
Strong leadership, vendor management, documentation, and executive communication skills.
Experience managing production cloud infrastructure and third-party managed service providers.

Nice To Haves

Familiarity with ISO 27001, NIST CSF, CIS Controls, or similar cybersecurity frameworks; direct ISO 27001 certification experience is preferred but not required.
Experience supporting rapidly growing organizations and integrating new locations is strongly preferred.
Certifications such as CISSP, CISM, CCNP, AZ-500, SC-100, or equivalent are not required.

Responsibilities

Own the availability, performance, security, and operational health of global IT infrastructure and the Azure production environment.
Establish and enforce global infrastructure standards across offices, including network architecture, firewalls, switching, Wi-Fi, internet connectivity, segmentation, redundancy, monitoring, and secure remote access.
Ensure new and existing offices meet standardized network, security, documentation, configuration, and support requirements.
Manage Azure infrastructure operations and managed service provider relationships, including availability, backup, recovery, monitoring, capacity, security, and cost optimization.
Maintain architecture diagrams, configurations, inventories, operating procedures, and disaster recovery documentation.
Establish monitoring, alerting, escalation, and change-management practices for production infrastructure.
Lead infrastructure modernization initiatives, including cloud, SD-WAN/SASE, Zero Trust, and automation.
Own and continuously improve cybersecurity operations and the company's security posture.
Manage and optimize security platforms and partners, including CrowdStrike MDR/EDR, Abnormal Security, Microsoft security capabilities, vulnerability management, and security monitoring/SOC services.
Own endpoint security standards and ensure corporate endpoints meet security, patching, encryption, configuration, and compliance standards.
Establish vulnerability identification, prioritization, remediation, and reporting processes with defined targets.
Lead security incident response and serve as the primary IT escalation point for cybersecurity incidents.
Coordinate penetration testing, vulnerability assessments, security audits, and remediation activities.
Maintain and periodically test incident response, disaster recovery, backup, and business continuity capabilities.
Ensure appropriate controls for privileged accounts, MFA, identity and access management, conditional access, administrative access, service accounts, and access reviews.
Manage third-party technology and security risk with appropriate business functions.
Own the security awareness program, including employee training, phishing simulations, reporting, and follow-up; ensure new employees receive required training during onboarding.
Establish measurable security-awareness KPIs and identify areas needing additional training or controls.
Partner with People & Culture and business leaders to promote security awareness and accountability.
Lead and develop the global IT infrastructure/helpdesk team and manage outsourced technology partners.
Establish operational SLAs, escalation procedures, standards, and accountability across internal and external resources.
Maintain an infrastructure and cybersecurity dashboard for the CIO covering availability, incidents, vulnerabilities, patch and endpoint compliance, security awareness, backup/DR health, and major risks.
Manage infrastructure and cybersecurity budgets, contracts, licensing, renewals, and vendor performance.
Participate in technology planning for acquisitions, new offices, expansions, and other business growth initiatives.
Provide hands-on technical leadership and participate in troubleshooting and incident resolution when appropriate.