IT Security and Systems Engineer

First, we are lean. Everyone here contributes outside a narrow job description, and the people who do well see that as a chance to understand the whole environment rather than as a distraction.

Second, you will own outcomes, not task lists. Projects here come with real timelines, defined deliverables, and regular check-ins with your manager and business unit leadership. What they do not come with is someone standing over your shoulder deciding how you get there. We will agree on the what and the when. We expect you to surface risks early, keep stakeholders informed, and tell us when a date is going to move before it moves.

Third, you will report to our Senior IT Manager and work directly with our CTO on security strategy, framework roadmaps, and risk decisions. This is a small enough organization that your work is visible at the executive level and your recommendations get heard. That access comes with the expectation that you can communicate clearly with a non-technical audience and defend a position.

If you want a role where the path is handed to you, this is not a fit. If you want ownership with clear expectations and a manager who backs you up rather than second-guesses you, this is that role.

We evaluate this role on outcomes, not activity. In your first year, success means:

• Our CMMC Level 2 gap assessment is complete, the System Security Plan is written, and we are executing against a plan with dates we can defend to an assessor

• Security and compliance projects land on their committed timelines, and when a date has to move, leadership hears it from you in advance rather than after the fact

• Critical and high vulnerabilities are remediated within defined windows, and we can show the trend

• Our security policies reflect how the business actually operates, so people follow them instead of working around them

• Business unit leaders come to you early on decisions with security implications, because you have made yourself useful rather than obstructive