Duties & Responsibilities

• Lead security architecture, risk remediation, control design, technology assessment, and roadmap development.
• Collaborate with Information Security, Information Technology, Global Managed Services, DevOps, and other teams as needed to design, promote, and implement information security solutions, tools, and automation that support the continuous compliance of information systems and assets.
• Partner with leadership to define strategy and roadmap for the organization.
• Work collaboratively with stakeholders to identify, evaluate, and recommend best-fit solutions and lead implementation efforts where appropriate.
• Provide security consultation to internal clients and represent Information Security in CAB, ARB, and related governance forums.
• Lead the development and maturation of the Vulnerability Management program.
• Ensure written procedures exist for information security controls and processes and that they are consistently followed.
• Define security strategy, standards, product requirements, and practical control expectations for enterprise and product environments.
• Review Itron product architectures, deployment models, emerging technologies, and security products for risk, fit, and readiness.
• Support AI governance initiatives through security requirements, risk review processes, and control expectations for AI-enabled solutions.
• Manage risk remediation issues and action plans from documentation through resolution, ensuring accountability and effective execution.
• Translate threat intelligence and emerging vulnerability trends into actionable security requirements and control improvements.
• Maintain current knowledge of information security issues, threats, technologies, and industry best practices.
• Identify and implement process improvement opportunities across security controls, including logging, monitoring, incident response, vulnerability management, and penetration testing.
• Lead, mentor, and develop a team of information security professionals while fostering a collaborative, agile, and innovative culture.

Required Skills & Experience

• Minimum 8 years of experience as an Information Security Engineer, Technology Leader, or Manager, preferably within organizations offering SaaS-based enterprise software products.
• Minimum 4 years of experience managing Information Security personnel.
• Strong working knowledge of ISO 27001 certification or other information security frameworks such as NIST SP 800-53 or NIST-IR 7628.
• Strong understanding of security concepts and controls across networks, infrastructure, operations, databases, operating systems, and applications.
• Hands-on experience evaluating, deploying, configuring, and operating security tools and technologies.
• Current knowledge of commercial security products, services, and industry trends.
• Ability to perform effectively under pressure while maintaining a professional, authentic, and customer-focused approach.
• Proven ability to work collaboratively with business units, IT teams, Managed Services organizations, vendors, consultants, and other stakeholders.
• Experience developing and managing department-level budgets.
• Experience building, leading, and developing high-performing teams.
• Strong problem-solving skills with a proactive mindset and commitment to ownership through resolution.
• Excellent written, verbal, and interpersonal communication skills.
• Bachelor’s degree in a related field or equivalent combination of education and experience.

Preferred Skills & Experience

• CISM, CISSP, or similar industry-recognized cybersecurity certification strongly preferred.