SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Trigo is seeking an experienced, hands-on CISO & Head of IT to lead the company's Information Security, Cybersecurity, and IT operations. This is a strategic and operational role combining management, technical ownership, and company-wide initiative leadership.
Key Responsibilities:
- Lead and manage the IT & Information Security team, including task prioritization, professional development, and day-to-day operations.
- Build annual and quarterly IT & Security work plans, define priorities and KPIs, track execution, manage budgets, and report progress to senior management.
- Define and continuously improve the company's cybersecurity and IT strategy, architecture, policies, and controls.
- Own corporate IT infrastructure, including networks, server rooms, cloud environments, endpoints, operating systems, identity infrastructure, and business applications.
- Own IT service delivery and support operations, including ticket management, service levels, workload management, user satisfaction, and continuous improvement of the employee IT experience.
- Own Identity & Access Management, including SSO, MFA, access lifecycle, privileged access management, and least-privilege principles.
- Manage network and infrastructure security, including firewalls, segmentation, VPN/remote access, monitoring, and secure connectivity.
- Oversee security operations, including security monitoring, endpoint security, vulnerability management, incident response, and investigation.
- Collaborate with R&D, DevOps, and Product teams on cloud security, application security, secure development practices, and security architecture.
- Own security governance, risk management, and compliance programs, including audits, policies, risk assessments, and remediation plans.
- Lead business continuity, disaster recovery, and cybersecurity exercises.
- Manage third-party security risk, vendors, contracts, budgets, and technology evaluations.
- Represent Information Security in customer security reviews and work closely with management and business stakeholders.
Requirements:
- 7+ years of relevant experience in Information Security, Cybersecurity, and/or IT infrastructure, including 3+ years in a leadership or management role.
- Proven experience leading technical teams, including people management, delegation, prioritization, and professional development.
- Proven ability to build and execute annual and quarterly work plans, manage multiple projects and priorities, define KPIs, and track execution.
- Strong hands-on technical background and broad understanding of IT infrastructure, networking, IAM, and cybersecurity.
- Strong understanding of networking, firewalls, segmentation, VPN, DNS, certificates, and secure remote access.
- Strong knowledge of IAM and authentication concepts, including SSO, MFA, SAML/OIDC, RBAC, and access lifecycle management.
- Experience managing corporate IT environments, endpoints, and IT service/support operations.
- Experience with security operations, monitoring, incident response, and vulnerability management.
- Experience with information security governance, risk management, policies, and security audits.
- Strong project, vendor, and budget management capabilities.
- Excellent communication skills and ability to work effectively with technical teams, employees, customers, and senior management.
- Independent, pragmatic, and execution-oriented, with strong problem-solving and decision-making capabilities.
Advantages:
- Experience managing cloud environments, particularly GCP and/or Azure.
- Experience with ISO 27001 and SOC 2 implementation, certification, and audit processes.
- Experience managing server rooms, virtualization, and hybrid cloud/on-prem environments.
- Experience with Windows, macOS, and Linux environments and enterprise endpoint management.
- Understanding of DevOps, Kubernetes, containers, CI/CD, and modern application security.
- Experience with SIEM, EDR, and security automation.
- Experience in a technology/SaaS company working closely with R&D and DevOps teams.
- Experience leading Business Continuity, Disaster Recovery, and cybersecurity exercises.
