Job Title: Security Lead

Location: Bridgewater, NJ (Onsite)
Duration: 36 Months

Job Summary:

We are seeking an experienced Security Lead to oversee cybersecurity governance, risk management, compliance, and security operations within a complex enterprise environment. The ideal candidate will provide technical leadership, coordinate with cross-functional teams, and ensure the organization''''s cybersecurity controls, policies, and operational processes are effectively implemented and continuously improved. This role requires strong expertise in security operations, governance, vulnerability management, incident readiness, and stakeholder communication.

Key Responsibilities:

Cybersecurity Governance & Operational Oversight:

• Provide day-to-day cybersecurity oversight by partnering with client leadership, security teams, and technical stakeholders.
• Monitor the overall health of the security environment through dashboards, security metrics, and operational reporting.
• Review security events, vulnerability findings, and operational alerts to ensure timely investigation and resolution.
• Prioritize security risks based on business impact and coordinate remediation activities with infrastructure, application, network, cloud, and Identity & Access Management teams.
• Track remediation efforts for critical vulnerabilities, configuration issues, and security control gaps while ensuring timely closure.
• Review security-related change requests, exception approvals, and operational activities to ensure compliance with established security policies.
• Maintain regular communication with business and technical stakeholders by providing updates on security posture, risks, issues, remediation progress, and key performance metrics.

Security Operations Leadership:

• Lead enterprise security operations and provide oversight of Security Operations Center (SOC) activities, ensuring accurate incident classification and timely response.
• Monitor endpoint security, SIEM platforms, privileged access management activities, endpoint detection and response (EDR), antivirus solutions, and security monitoring capabilities.
• Coordinate with managed security service providers and external vendors to ensure service quality, SLA compliance, and continuous improvement of security operations.
• Validate incident response readiness, escalation procedures, and operational response processes to strengthen organizational resilience.
• Review threat intelligence, emerging cyber risks, and industry trends to proactively identify potential threats and implement appropriate defensive measures.

Governance, Risk & Compliance:

• Lead cybersecurity governance initiatives by ensuring adherence to organizational security policies, regulatory requirements, and industry best practices.
• Conduct risk assessments and security reviews to identify potential vulnerabilities and recommend appropriate mitigation strategies.
• Support internal and external security audits by maintaining documentation, evidence, and compliance reporting.
• Develop and maintain governance frameworks, security standards, procedures, and operational documentation.

Security Architecture & Technical Leadership:

• Provide security guidance during solution design, infrastructure implementation, and technology initiatives to ensure security controls are integrated throughout the project lifecycle.
• Collaborate with architecture, engineering, infrastructure, cloud, networking, and application teams to implement secure design principles.
• Provide technical leadership across key cybersecurity domains, including Identity & Access Management (IAM), network security, firewall technologies, vulnerability management, security architecture, penetration testing, and threat detection.

Security Program Management:

• Develop, implement, and continuously enhance the organization''''s cybersecurity strategy, roadmap, and operational plans.
• Lead cybersecurity initiatives and security improvement projects while coordinating with business leaders and executive stakeholders.
• Establish security performance metrics, prepare executive reports, and communicate cybersecurity risks, priorities, and recommendations to leadership.
• Support budgeting, resource planning, vendor management, and operational governance for the cybersecurity program.

Incident Management & Security Readiness:

• Coordinate security incident response activities, ensuring appropriate escalation, investigation, containment, and recovery procedures are followed.
• Lead incident response planning, tabletop exercises, and forensic investigation activities when required.
• Continuously evaluate security processes to improve incident readiness, response effectiveness, and operational resilience.

Security Awareness & Continuous Improvement:

• Develop and maintain cybersecurity policies, standards, and operational procedures aligned with recognized industry frameworks.
• Promote security awareness by delivering training, guidance, and best practices across the organization.
• Stay current with evolving cybersecurity threats, emerging technologies, regulatory changes, and industry trends to strengthen the organization''''s security posture.
• Foster a culture of continuous improvement by identifying opportunities to enhance security controls, operational processes, and governance practices.

Required Qualifications:

• Extensive experience in cybersecurity governance, risk management, compliance, and enterprise security operations.
• Strong knowledge of Security Operations Center (SOC) processes, SIEM platforms, vulnerability management, endpoint security, and incident response.
• Experience with Governance, Risk & Compliance (GRC) frameworks and security policy development.
• Hands-on understanding of Identity & Access Management (IAM), privileged access management, firewall technologies, network security, and security architecture.
• Experience coordinating with cross-functional IT teams, external vendors, and executive stakeholders to drive security initiatives.
• Strong understanding of security audits, regulatory compliance, risk assessments, and security control implementation.
• Excellent analytical, leadership, communication, stakeholder management, and problem-solving skills.
• Ability to prioritize multiple security initiatives while managing operational risks in a fast-paced enterprise environment.

Preferred Qualifications:

• Experience managing enterprise cybersecurity programs in large, complex environments.
• Familiarity with cloud security, threat intelligence, penetration testing, digital forensics, and enterprise security monitoring.
• Industry certifications such as CISSP, CISM, CISA, CRISC, Security+, or equivalent are highly desirable.
• Experience leading security projects, compliance initiatives, and cross-functional cybersecurity programs.