Cybersecurity and Technology Risk Lead (1150802)

Department: Information Technology • Employment Type: Contract to Hire • Location: Dallas, TX (Hybrid)

About the role

We are seeking a highly technical, hands-on cybersecurity professional to lead the design, implementation, and maturation of enterprise security capabilities in a rapidly growing organization. This is not a traditional management role. While the individual will influence strategy, security roadmaps, and third-party partners, the primary focus is on execution, architectural leadership, and hands-on cybersecurity delivery. The ideal candidate is someone who enjoys rolling up their sleeves to solve complex security problems, implement controls, investigate incidents, remediate risks, and build scalable security capabilities from the ground up. The successful candidate will serve as the organization's senior cybersecurity subject matter expert and technical leader, partnering closely with IT, Legal, Finance, Operations, auditors, engineering teams, and external service providers.

Responsibilities

• Hands-On Security Architecture & Engineering
  • Design, implement, and continuously improve enterprise security controls across cloud, SaaS, endpoint, identity, infrastructure, and data environments.
  • Serve as the technical lead for: Identity & Access Management (IAM), Privileged Access Management (PAM/PIM), Microsoft Entra ID, Endpoint Security, Cloud & SaaS Security, Vulnerability Management, Logging, Monitoring, and Detection, Third-Party Risk Security.
  • Evaluate security gaps and personally drive implementation of remediation activities.
• Microsoft Security Platform Ownership
  • Act as the primary security SME for the Microsoft security ecosystem.
  • Configure, optimize, and support security capabilities within: Microsoft Entra, Microsoft Defender, Microsoft Purview, Identity Governance, Data Protection & Compliance Solutions.
  • Drive adoption of native Microsoft security capabilities and best practices rather than relying solely on third-party tools.
• Security Program Build-Out
  • Build and mature cybersecurity capabilities in a rapidly scaling environment.
  • Develop practical security processes, standards, and controls that can be operationalized and maintained by the organization.
  • Translate security assessments, audits, findings, and identified risks into actionable remediation plans with measurable outcomes.
  • Prioritize and execute risk reduction initiatives rather than acting solely in an advisory or governance capacity.
• Incident Response & Investigations
  • Lead and actively participate in cybersecurity incidents from investigation through remediation.
  • Perform: root cause analysis, data-loss investigations, threat analysis, containment and recovery planning, lessons-learned reviews.