Global Infrastructure & Cybersecurity Manager

Description

Role Summary

At Rand Technology we are seeking a hands-on Global Infrastructure & Cybersecurity Manager to lead the company's global infrastructure, cloud, network, cybersecurity, and IT operations.

This role is responsible for ensuring Rand's technology environment is secure, resilient, standardized, scalable, and operationally mature as the company continues its global growth.

The Manager will own the operational health and security of Rand's global infrastructure, including Microsoft Azure production environments, Microsoft 365/Entra ID, global office networks, endpoint security, email security, vulnerability management, security monitoring, and disaster recovery.

The role will lead internal IT operations resources and manage key technology and security partners while working closely with the CIO to execute Rand's infrastructure and cybersecurity roadmap and mature controls.

*This role is onsite based in our Headquarters in Irvine, CA

*Please note that this role is not eligible for visa sponsorship.

Essential Functions:

Global Infrastructure & Cloud Operations

•  Own the availability, performance, security, and operational health of Rand's global IT infrastructure and Azure production environment.
•  Establish and enforce global infrastructure standards across all offices, including network architecture, firewalls, switching, Wi-Fi, Internet connectivity, segmentation, redundancy, monitoring, and secure remote access.
•  Ensure new and existing offices follow standardized network, security, documentation, configuration, and support requirements.
•  Manage Azure infrastructure operations and MSP relationships, including availability, backup, recovery, monitoring, capacity, security, and cost optimization.
•  Maintain current architecture diagrams, configurations, inventories, operating procedures, and disaster recovery documentation.
•  Establish appropriate monitoring, alerting, escalation, and change-management practices for production infrastructure.
•  Lead infrastructure modernization initiatives including cloud, SD-WAN/SASE, Zero Trust, automation, and other technologies as appropriate.

Cybersecurity & Risk Management

•  Own and continuously improve Rand's cybersecurity operations and security posture.
•  Manage and optimize security platforms and partners, including CrowdStrike MDR/EDR, Abnormal Security, Microsoft security capabilities, vulnerability management, and security monitoring/SOC services.
•  Own endpoint security standards and ensure corporate endpoints meet required security, patching, encryption, configuration, and compliance standards.
•  Establish vulnerability identification, prioritization, remediation, and reporting processes with defined remediation targets.
•  Lead security incident response and serve as the primary IT escalation point for cybersecurity incidents.
•  Coordinate penetration testing, vulnerability assessments, security audits, and remediation activities.
• Maintain and periodically test incident response, disaster recovery, backup, and business continuity capabilities.
•  Ensure appropriate security controls for privileged accounts, MFA, identity and access management, conditional access, administrative access, service accounts, and access reviews.
•  Manage third-party technology/security risk in partnership with appropriate business functions.

Security Awareness & Human Risk

•  Own the company's security awareness program using KnowBe4 or equivalent, including employee training, phishing simulations, reporting, and follow-up.
•  Ensure new employees receive required cybersecurity awareness training as part of onboarding.
•  Establish measurable security-awareness KPIs and identify areas requiring additional training or controls.
•  Partner with People & Culture and business leaders to promote security awareness and accountability across the organization.

Operations, Metrics & Leadership

•  Lead and develop the global IT infrastructure/helpdesk team and effectively manage outsourced technology partners.
• Establish operational SLAs, escalation procedures, standards, and accountability across internal and external resources.
• Maintain a regular infrastructure and cybersecurity dashboard for the CIO covering availability, security incidents, vulnerabilities, patch compliance, endpoint compliance, phishing/security awareness, backup/DR health, and major risks.
• Manage infrastructure and cybersecurity budgets, contracts, licensing, renewals, and vendor performance.
• Participate in technology planning for acquisitions, new offices, expansions, and other business growth initiatives.
• Provide hands-on technical leadership and participate directly in troubleshooting and incident resolution when appropriate.

Core Competencies

• Security-first mindset with strong understanding of modern cybersecurity threats and controls.
• Strong knowledge of Microsoft Azure, Microsoft 365 and Entra ID security and administration.
• Strong experience with MDR/EDR, email security, vulnerability management, IAM/MFA, SIEM/SOC operations and incident response.
• Strong networking foundation including WAN/LAN, SD-WAN, firewalls, Wi-Fi, VPN, segmentation and Zero Trust principles.
• Demonstrated ability to establish global technology standards across multiple offices and regions. Strong understanding of security governance, risk management, policies, controls and audit requirements.
• Familiarity with ISO 27001, NIST CSF, CIS Controls or similar cybersecurity frameworks; direct ISO 27001 certification experience is preferred but not required.
• Ability to move comfortably between strategy, governance and hands-on technical problem solving.
• Strong leadership, vendor management, documentation and executive communication skills.
• Experience managing production cloud infrastructure and third-party managed service providers

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or related discipline, or equivalent professional experience.
• 8+ years of progressive infrastructure/network/security experience with 3+ years in leadership or management capacity.
• Demonstrated experience managing multi-site/global infrastructure and cybersecurity environments.
• Hands-on experience managing or governing Microsoft Azure production environments.
• Strong experience with Microsoft 365/Entra ID, networking, endpoint security, vulnerability management, identity security and incident response.
• Experience managing MDR/SOC, MSP, cloud and other outsourced technology providers.
• Experience implementing security policies, standards, risk management and audit controls.
• Experience with security awareness and phishing simulation programs such as KnowBe4.
• Experience with disaster recovery, backup/recovery testing and business continuity
• Experience supporting rapidly growing organizations and integrating new locations is strongly preferred.
• Certifications such as CISSP, CISM, CCNP, AZ-500, SC-100 or equivalent are but not required

Rand Technology is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, pregnancy, veteran status, sexual orientation, gender identity, or any other characteristic protected by federal, state, or local law.