IT Security Lead

QGenda•Atlanta, GA

1d•Hybrid

About The Position

QGenda’s IT Security Lead is a senior individual contributor responsible for leading IT security operations, risk management, and governance, risk, and compliance initiatives across the company’s IT systems, infrastructure, and SaaS applications. The role identifies and reduces risk, strengthens security controls, and develops the GRC program from policy and control design through audit readiness, evidence collection, and remediation. It works closely with IT and Help Desk, Legal, Product Development, and business teams, and partners with Product Development’s security team to align enterprise IT security with QGenda’s broader security program. The role leads enterprise IT security strategy and operations; oversees controls across identity, endpoints, SaaS applications, and network infrastructure; and assesses architecture, configurations, control effectiveness, and attack surface. It provides guidance to IT Systems Administrators and Help Desk teams, manages vulnerability and audit programs, improves GRC workflows through automation and continuous monitoring, and maintains policies and practices aligned with applicable standards and obligations. The position also evaluates risks from internal AI adoption and emerging technologies, coordinates incident preparedness and response, and supports security awareness.

Requirements

At least 5 years of experience in IT security, GRC, security engineering, security operations, or related fields.
Bachelor’s degree from an accredited college or university.
Hands-on experience securing enterprise IT environments across identity and access management, endpoints, SaaS applications, network infrastructure, and macOS and Windows environments.
Experience with enterprise security and IT platforms such as Okta, Zscaler, CrowdStrike, Google Workspace, Microsoft, Jamf, Intune, and Meraki, or comparable tools.
Understanding of enterprise risk management and GRC, and ability to apply frameworks and requirements such as NIST, ISO 27001, SOC 1, SOC 2, SOX, HIPAA, and FedRAMP, as applicable, to practical security controls.
Experience leading or supporting security audits and compliance assessments in highly regulated environments, including working with auditors, mapping controls, gathering evidence, remediating gaps, and monitoring controls.
Experience managing vulnerability programs, including scanning, risk prioritization, remediation coordination, patching, and validation.
Ability to assess security risks in SaaS applications, internal AI tools, and emerging technologies, including configuration, access, data exposure, vulnerabilities, and impacts to existing controls.
Experience supporting incident response and security awareness.
Effective communication with internal and external stakeholders, including explaining cybersecurity principles and risks to technical and nontechnical audiences.
Ability to work independently as a senior individual contributor, lead cross-functional security initiatives, and influence teams across IT and the business.
Applicants must be authorized to work for any employer in the United States and be located in the United States; employment visa sponsorship or sponsorship transfer is not available.

Nice To Haves

Familiarity with GRC automation and continuous monitoring platforms.
Familiarity with tools such as Vanta.
Familiarity with tools such as Tenable.
Ability to use AI and machine learning to improve security workflows while maintaining human oversight and critical judgment.

Responsibilities

Lead IT security operations and advance enterprise IT security strategy and GRC initiatives, translating business objectives and risk priorities into measurable improvements.
Oversee security controls across IT platforms and assets, including identity, endpoints, SaaS applications, and network infrastructure.
Promote secure architecture and configuration; assess control effectiveness and attack surface; address gaps; define security metrics; and report security posture to executive leadership.
Serve as IT’s primary security subject matter expert, guiding IT Systems Administrators and Help Desk teams supporting IT, CRM, and Procurement on secure configuration and control implementation.
Partner with system owners to drive remediation.
Collaborate with IT, Help Desk, and business stakeholders to align security initiatives with business objectives and integrate security into enterprise IT projects, system changes, and operational processes.
Coordinate with Product Development’s security team where initiatives overlap.
Lead the IT vulnerability management program, including scans and assessments, risk-based prioritization, remediation and patching, and validation of fixes.
Lead internal and external IT security audits and compliance assessments, including control mapping, evidence coordination, gap analysis, remediation tracking, and audit readiness.
Improve GRC operations by automating control testing, evidence collection, and compliance workflows, and establishing ongoing monitoring of control status.
Develop, implement, and maintain IT security policies, standards, and best practices aligned with applicable frameworks, audit requirements, regulations, and customer and contractual obligations.
Evaluate security risks associated with internal AI adoption and new technologies, and recommend appropriate safeguards.
Coordinate incident preparedness and response with relevant teams, capture lessons learned, and provide security awareness training and guidance to staff.

Benefits

Fully company-paid options for medical insurance, including in-person and virtual care.
Dental insurance.
Vision insurance.
Generous paid time off (PTO).
Paid parental leave for birth, adoption, or permanent placement.
401(k) with company match.
Annual Costco membership.
Cell phone stipend.
Commuter benefits.
In-office perks.