Head of Cyber Security

Scurri•Wexford Township, MI

1d•Onsite

About The Position

Scurri optimises the ordering, shipping and delivery processes for a growing list of online retailers and distribution companies. We make it easier for well known brands to ship goods to their customers around the world. We are looking for a Head of Cybersecurity to lead our defensive strategy in an era of Agentic AI and rapid automation. Reporting to the CTO, you will oversee the entire security lifecycle, bridge the gap between engineering and compliance, and directly mentor a junior security engineer. This is a leadership role that still requires the technical depth to audit AI-generated code and architect automated response systems.

Requirements

6+ years in Cybersecurity, with at least 1-2 years in a leadership or formal mentoring capacity.
Proficiency with AWS Security (Security Hub, GuardDuty, IAM) and Python for automation.
Experience securing LLM-integrated applications and managing the risks of AI-generated code.
Strong grasp of modern frameworks (NIST, CIS) and regulatory environments (GDPR, NIS2, DORA).
Professional-level certs required (CISSP, CISM, or AWS Certified Security - Specialty).

Responsibilities

Define and execute a long-term security roadmap that balances aggressive shipping speeds with robust protection.
Serve as the primary security advocate to the executive team.
Direct line management of a Cybersecurity team, responsible for their technical growth, task prioritization, and professional development.
Develop and enforce security frameworks and acceptable use policies for commercial AI tools used broadly across the organization, ensuring data privacy and preventing corporate data leakage.
Establish guardrails for AI-assisted coding (e.g., GitHub Copilot, Cursor) to prevent prompt injection and data leakage.
Implement Agentic AI security tools that move beyond static playbooks to dynamic, automated incident response and vulnerability discovery.
Integrate security deeply into our CI/CD pipelines, shifting left by automating secret scanning, dependency analysis, and policy-as-code.
Lead our ISO 27001 and SOC 2 programs, moving from manual evidence collection to a "Compliance-as-a-Service" model using automated monitoring tools.
Manage our detection engineering capabilities and oversee third-party security audits/penetration tests.
Act as the central security authority across the business.
Translate technical resilience into a competitive advantage during RFQ/RFP processes for Sales.
Deliver strategic risk reporting to the Board and executive leadership.
Serve as the primary security liaison for external government and regulatory agencies (e.g., Enterprise Ireland).