IT Security Team Lead – Hands‑On Technical Leadership

About the role

This position leads the Information Security function, providing hands‑on technical guidance and mentorship to protect the organization’s systems and data. You will work closely with engineering, operations, governance and compliance teams to ensure security is embedded in all technology initiatives.

Key responsibilities

• Lead security reviews of new systems, technologies, deployments and solutions, identifying risks and recommending controls.
• Provide technical security and architectural guidance throughout design and implementation phases.
• Ensure solutions comply with internal security policies, secure configuration standards and regulatory requirements.
• Review third‑party and vendor technologies from an information‑security perspective.
• Maintain and update IT security policies and standards.
• Monitor compliance, identify gaps and drive remediation actions.
• Partner with Governance and Compliance to align practices with frameworks such as ISO 27001, NIST SP 800‑171 and GDPR.
• Support implementation of controls that protect information assets and strengthen overall security posture.
• Contribute to security awareness initiatives and promote a strong security culture.
• Provide technical leadership, guidance and mentoring within the security team.

Required profile

• 3‑5+ years of experience in Information Security, Security Engineering, or Security Architecture.
• Proven experience conducting security reviews of systems, applications or infrastructure.
• Strong understanding of enterprise security principles, controls and secure architecture.
• Familiarity with ISO 27000 series, ISO 27001, NIST SP 800‑171, GDPR and related standards.
• Experience collaborating with engineering, IT operations, governance and compliance stakeholders.
• Excellent analytical, problem‑solving and communication skills.
• Previous leadership, mentoring or team‑coordination experience.
• Bachelor’s degree in Computer Science or a related field (preferred).

Required skills

• Security architecture
• Risk assessment and mitigation
• ISO 27001 implementation
• NIST SP 800‑171 compliance
• GDPR compliance
• Security policy development