Head of IT Infrastructure and Security

FIRY•Las Vegas, NV

1d•Onsite

About The Position

The Head of IT Infrastructure and Security is an executive role responsible for enterprise technology, infrastructure, and cybersecurity across FIRY. The role will strengthen operations, establish governance, and develop a deliverable technology-risk roadmap while leading the company’s continued investment in data and cybersecurity infrastructure. The position is accountable for improving resilience and uptime, raising control and audit maturity, and optimizing technology spend and vendor performance. It also establishes clear service levels and decision rights for Finance, Legal, Engineering, and business leaders, and advises the Security Council, Audit Committee, and Board on technology and cyber risk. The role owns enterprise IT and security strategy, infrastructure and service operations, IT general controls (ITGCs), cybersecurity operations, business continuity and disaster recovery, and third-party technology governance. It partners with Engineering on boundaries between corporate IT and product-related infrastructure and security, and leads technology integration or separation for acquisitions, divestitures, subsidiaries, and material vendors. The role leads internal staff and managed service providers and communicates risks, investments, incidents, and performance to executive and governance stakeholders. This is an onsite position at FIRY’s Las Vegas headquarters, with travel of less than 10%. Total starting compensation, including base salary, bonus, and equity, is $324,034.

Requirements

10 or more years of progressive leadership across enterprise IT, infrastructure, cybersecurity, or technology operations, including senior leadership in a technology or digital business.
Demonstrated ownership of a broad enterprise IT environment and cybersecurity program in a cloud-first, geographically distributed organization.
Direct experience designing, remediating, and operating ITGCs in a public-company SOX environment, including access, change management, program operations, and IT-dependent controls.
Experience leading material control remediation with Finance, Internal Audit, external audit, and technical control owners, and distinguishing operational ownership from independent assurance.
Depth in IAM and privileged access, endpoint and device management, networks, AWS or comparable cloud platforms, SaaS governance, ITSM, logging and monitoring, vulnerability management, and incident response.
Track record building business continuity and disaster recovery programs and running executive tabletop and recovery exercises.
Experience with NIST CSF, ISO 27001, PCI, privacy requirements, and third-party risk.
Experience leading teams and managed service providers, owning budgets and vendor portfolios, and improving service quality while maintaining cost discipline.
Bachelor’s degree or equivalent practical experience in information systems, computer science, cybersecurity, engineering, or a related field.

Nice To Haves

CISA, CISSP, CISM, or comparable certification; certification is preferred but does not substitute for operating experience.
Experience supporting acquisitions, subsidiaries, or complex multi-entity environments is strongly preferred.

Responsibilities

Set and execute FIRY’s enterprise IT and security strategy, multi-year roadmap, operating model, architecture principles, budget, and performance measures.
Own reliable and secure corporate infrastructure, including networks, cloud workplace platforms, identity, endpoints, collaboration tools, enterprise applications, service management, and asset lifecycle.
Lead operational remediation and sustainable execution of ITGCs, including user and privileged access, segregation of duties, program change management, program operations, evidence retention, and issue tracking, in partnership with Finance and Internal Audit.
Serve as FIRY’s senior cybersecurity operator and functional CISO, maintaining the risk register, security policies and standards, monitoring, vulnerability management, incident response, employee awareness, and executive reporting.
Direct business continuity and disaster recovery planning, testing, lessons learned, and remediation for critical enterprise services and dependencies.
Build risk-based third-party technology governance spanning diligence, contracting input, onboarding, monitoring, renewals, incident coordination, and exit planning.
Partner with Engineering to define ownership boundaries among corporate IT, cloud and platform infrastructure, product security, DevSecOps, and application security.
Lead technology integration and separation planning for acquisitions, divestitures, subsidiaries, and material vendors, including identity, data, infrastructure, controls, and continuity.
Lead, develop, and scale the internal team and managed service providers; establish service levels, documentation, on-call coverage, and accountable execution.
Translate technology risk, investment choices, incidents, and performance into concise recommendations for the CAO, Security Council, executive leadership, Audit Committee, and Board, as applicable.