Head of Infrastructure & Security

Longbow Advantage•Montreal, QC

1d•Remote

About The Position

We are seeking a Head of Infrastructure & Security, a senior leader to own infrastructure, security, and IT across two connected businesses: Rebus (a B2B SaaS platform) and Longbow Advantage (a WMS implementation and professional services firm). This role is responsible for maturing, securing, and scaling these domains as the company grows. It is a hands-on leadership position where the individual will set direction, own outcomes, and remain close to technical details to make sound architectural decisions and lead a team of individual contributors. The role is remote, located in Montreal, with some in-person team meetings.

Requirements

Significant experience owning production cloud infrastructure at scale, ideally on GCP, in a SaaS context.
Demonstrated ownership of a security program at a company handling sensitive customer data, including direct experience driving SOC 2 Type II (or equivalent) to completion.
Strong grasp of operating large, multi-tenant database environments.
Credibility to lead technical conversations with enterprise customers' security teams.
Experience leading and developing technical staff, including senior individual contributors, and providing direction to an established IT team.
Sound judgment on the reliability/velocity/cost trade-offs that define infrastructure decisions at a growing company.

Nice To Haves

MongoDB experience is a significant advantage given our stack.
Experience in a dual-business or services-plus-product environment.
Familiarity with the privacy obligations of a data processor (GDPR, CCPA).
A pragmatic, build-vs-buy mindset on tooling and outsourced services (MDR, pentest, compliance automation).

Responsibilities

End-to-end ownership of cloud infrastructure on GCP, including architecture, reliability, cost, scalability, and operational excellence for the Rebus SaaS platform.
Manage the full cloud-native application environment, including containerized and serverless workloads, cloud networking, and the large-scale, multi-tenant data layer (MongoDB Atlas).
Oversee deployment, release, and maintenance processes with a focus on uptime and minimizing customer-disruption.
Lead the senior SRE team, providing direction and architectural vision.
Manage the overall security program, policy, posture, tooling, and incident response across both businesses.
Achieve and maintain SOC 2 Type II compliance, and evaluate ISO 27001.
Handle customer-facing security inquiries, including questionnaires, audits, and trust conversations.
Ensure compliance with data protection obligations as a data processor, including PII handling and privacy regimes (GDPR, CCPA).
Manage security vendor relationships (MDR/EDR, SIEM, endpoint protection, penetration testing).
Provide strategic direction and oversight for the internal IT function, corporate network, on-prem and cloud infrastructure, identity, endpoint management, help desk, and vendor relationships for Longbow Advantage.
Provide light-touch oversight of a small, hosted WMS environment on GCP, ensuring its reliability and availability.
Mentor and develop the established IT team, including an IT Manager and IT Administrators.