Software-engineer Remote- & Homeoffice Jobs in cambridge ∙ Seite 6

The Opportunity:

At Relay Tx, our team prides itself on integrating innovative computation and experimental techniques to gain insights that were never accessible before. Without robust security, compliance, and risk management, our groundbreaking research and operations would be vulnerable. We are in search of a Principal IT Security Engineer to lead our Information Security function within the IT organization. Our ideal teammate will be responsible for owning the full security program, driving strategic initiatives while managing tactical implementations, ensuring regulatory compliance, and leading the evolution of our security posture as we scale. 

Your Role:  

• Own and lead the complete Information Security function, serving as the primary authority for auditors, vendors, and regulatory bodies 

• Develop and execute yearly security strategies, managing concurrent initiatives from Zero Trust architecture to compliance frameworks (SOX, NIST) 

• Drive enterprise-wide security deployments across cloud (AWS), identity (Okta), network, and endpoint protection platforms while maintaining vendor risk management programs 

• Establish security policies, incident response plans, and training programs while conducting risk assessments and implementing hardening standards 

• Collaborate cross-functionally to ensure regulatory compliance and maintain security maturity frameworks 

Your Background: 

• 5+ years of experience in Information Security leadership roles with hands-on technical expertise in security engineering, demonstrated ability to own and manage enterprise security programs while interfacing with auditors, vendors, and regulatory bodies 

• Advanced knowledge of security frameworks including OWASP, MITRE ATT&CK, and CIS Controls 

• Deep expertise with enterprise security platforms including cloud security (AWS), identity management (Okta, including FastPass/Verify), Zero Trust architecture (Appgate), email security (ProofPoint), and endpoint protection (CrowdStrike) 

• Strong background in regulatory compliance frameworks (SOX, NIST Cybersecurity Framework) with proven experience developing security policies, conducting risk assessments, and maintaining audit readiness 

• Demonstrated track record managing complex security initiatives requiring both strategic planning and hands-on technical implementation, including scripting/automation capabilities and experience with security monitoring tools (SIEM, SOAR platforms) 

• Experience managing contractors, developing training programs, and optimizing security operations through process improvements and delegation 

• Excellent cross-functional collaboration and communication skills with ability to influence at all organizational levels and make binding security decisions on behalf of the company 

• Background in security maturity assessments, vulnerability management, and developing multi-year strategic improvement roadmaps 

If you are looking for a career with a company that has a start-up mentality AND a proven business model, we want to hear from you.

#JO1