IT Security Lead

QGenda•Atlanta, GA

2d•Hybrid

About The Position

QGenda is seeking an IT Security Lead to serve as a senior individual contributor responsible for IT security operations, risk management, and governance, risk, and compliance initiatives across IT systems, infrastructure, and SaaS applications. The role identifies and reduces risk, strengthens security controls, and matures the GRC program from policy and control design through audit readiness, evidence collection, and remediation. The IT Security Lead works closely with IT and Help Desk, Legal, Product Development, and business teams to streamline control management and align with applicable security standards. The role also partners with Product Development’s security team to align enterprise IT security with QGenda’s broader security program. QGenda is headquartered in Atlanta and has more than 800 employees across the United States.

Requirements

Minimum of 5 years of experience in IT security, GRC, security engineering, security operations, or related fields.
Bachelor’s degree from an accredited college or university.
Hands-on experience securing enterprise IT environments across identity and access management, endpoints, SaaS applications, network infrastructure, and macOS and Windows environments.
Experience with enterprise security and IT platforms such as Okta, Zscaler, CrowdStrike, Google Workspace, Microsoft, Jamf, Intune, and Meraki, or comparable tools.
Understanding of enterprise risk management and GRC, with ability to apply frameworks and requirements such as NIST, ISO 27001, SOC 1, SOC 2, SOX, HIPAA, and FedRAMP, as applicable, to practical security controls.
Experience leading or supporting security audits and compliance assessments in highly regulated environments, including working with auditors, mapping controls, gathering evidence, remediating gaps, and monitoring controls.
Experience managing vulnerability programs, including scanning, risk prioritization, remediation coordination, patching, and validation.
Ability to assess security risks in SaaS applications, internal AI tools, and emerging technologies, including configuration, access, data exposure, vulnerabilities, and impacts to existing controls.
Ability to use AI and machine learning to improve security workflows while maintaining human oversight and critical judgment.
Experience supporting incident response and security awareness.
Effective communication with internal and external stakeholders and ability to explain cybersecurity principles and risks to technical and nontechnical audiences.
Ability to independently lead cross-functional security initiatives and influence teams across IT and the business.
Must be authorized to work for any employer in the United States and located in the United States; employment visa sponsorship or transfer is not available.

Nice To Haves

Familiarity with GRC automation and continuous monitoring platforms.
Familiarity with Vanta.
Familiarity with Tenable.

Responsibilities

Lead IT security operations and advance enterprise IT security strategy and GRC initiatives, translating business objectives and risk priorities into measurable improvements.
Oversee security controls across IT platforms and assets, including identity, endpoints, SaaS applications, and network infrastructure; promote secure architecture and configuration, assess control effectiveness and attack surface, address gaps, define security metrics, and report security posture to executive leadership.
Serve as IT’s primary security subject matter expert, guiding IT Systems Administrators and Help Desk teams supporting IT, CRM, and Procurement on secure configuration and control implementation; partner with system owners to drive remediation.
Collaborate with IT, Help Desk, and business stakeholders to align security initiatives with business objectives and integrate security into enterprise IT projects, system changes, and operational processes; coordinate with Product Development’s security team where initiatives overlap.
Lead the IT vulnerability management program, including regular scans and assessments, risk-based prioritization, timely remediation and patching, and validation of fixes.
Lead internal and external IT security audits and compliance assessments, including control mapping, evidence coordination, gap analysis, remediation tracking, and audit readiness.
Improve GRC operations by automating control testing, evidence collection, and compliance workflows, and establishing ongoing monitoring of control status.
Develop, implement, and maintain IT security policies, standards, and best practices aligned with applicable frameworks, audit requirements, regulations, and customer and contractual obligations, including NIST, ISO 27001, SOC 1, SOC 2, SOX, HIPAA, and FedRAMP, as applicable.
Evaluate security risks associated with internal AI adoption and other new technologies, including configuration, data exposure, vulnerabilities, and impacts to existing controls; recommend appropriate safeguards.
Coordinate incident preparedness and response with relevant teams, capture lessons learned, and provide security awareness training and guidance to staff.

Benefits

Fully company-paid options for medical insurance, including in-person and virtual care.
Dental insurance.
Vision insurance.
Generous paid time off policy.
Paid parental leave for birth, adoption, or permanent placement.
401(k) with company match.
Annual Costco membership.
Cell phone stipend.
Commuter benefits.
In-office perks.