Cybersecurity Lead

Tehtävä

Maintain an evidence-based view of ReOrbit’s enterprise cybersecurity posture, material risks, control gaps, and improvement priorities. Own and execute the enterprise cybersecurity roadmap in alignment with company strategy, customer requirements, and the information-security management system. Translate threat intelligence, risk assessments, incidents, vulnerabilities, and audit findings into prioritised security improvements. Define meaningful cybersecurity metrics and provide concise reporting to security and company leadership. Own cyber-defence capabilities across identity, endpoints, networks, cloud platforms, and on-premises environments. Manage external SOC and security-service providers. Lead or coordinate the technical response to significant cybersecurity incidents. Own vulnerability and exposure management, including prioritisation, remediation, verification, and escalation. Coordinate penetration tests and technical security assessments. Improve privileged access, strong authentication, conditional access, identity lifecycle management, and device trust. Establish security baselines for endpoints, mobile devices, cloud services, networks, and administrative environments. Provide cybersecurity input to customer assurance activities, security questionnaires, architecture reviews, and technical discussions. Ensure customer security commitments are translated into implementable controls, responsible owners, evidence requirements, and operating procedures. Work closely with the Mission & Product Security Owner to maintain a clear boundary and effective coordination between enterprise cybersecurity and product or mission security. Lead, coach, and prioritise the work of the cybersecurity team. Drive security improvements through influence, clear requirements, practical support, and appropriate escalation. Help develop the cybersecurity budget, capability plan, technology roadmap, and external-service requirements. Promote a culture in which cybersecurity issues are identified early, discussed openly, and resolved based on business and mission risk.

Mitä odotamme

• Strong hands-on experience securing cloud, identity, endpoint, network, and on-premises environments.
• Demonstrated experience owning cybersecurity programmes, security operations capabilities, or major security improvement roadmaps.
• Experience leading cybersecurity incidents and developing incident-response capabilities.
• Strong background in vulnerability management, technical risk assessment, and remediation governance.
• Experience managing and collaborating with external SOC and security-service providers.
• Experience leading technical specialists, projects, or a cybersecurity team.
• Deep understanding of advanced threats, attack paths, cyber-risk management, and defence-in-depth.
• Strong knowledge of identity security, endpoint security, cloud security, network segmentation, and data protection.
• Hands-on familiarity with XDR or EDR, SASE, DLP, SIEM or security analytics, vulnerability management, and security automation.
• Experience with threat intelligence, threat hunting, incident investigation, and digital forensics.
• Solid knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, and recognised hardening practices.
• Experience with Google Workspace, Google Cloud Platform, Microsoft Entra ID, and Microsoft Intune.
• Experience in space, defence, aerospace, telecommunications, critical infrastructure, or another high-assurance sector is a plus.
• Experience supporting sovereign, governmental, regulated, or security-sensitive customers is a plus.
• Experience with Palo Alto Networks technologies is a plus.
• Experience with supply-chain security or supplier assurance is a plus.
• Relevant certifications such as CISSP, CISM, CCSP, GIAC, or equivalent experience are a plus.
• Strong communication and stakeholder management skills, with the ability to work effectively across technical, security, engineering, and business teams.