Job Summary
Lead Astera’s information security program across identity and access, data protection, incident response, compliance, cloud, SaaS and on-prem environments while mentoring the IS team and building a security-aware culture.
What You’ll Do
- Build and lead Astera’s security program to protect source code, customer data, IP, and financial and HR records
- Classify data and enforce least-privilege access, DLP, encryption, endpoint and email security
- Own identity and access management, including MFA, conditional access, privileged access and joiner/mover/leaver processes
- Secure our cloud, SaaS tools, network and source code, and own the company-wide subscription management process
- Lead vulnerability management, patching, security monitoring and regular access reviews
- Own incident response, backups, disaster recovery and business continuity, and test them against recovery targets
- Write and enforce IS policies, and lead risk assessments, vendor security reviews and internal audits
- Drive alignment with ISO 27001, SOC 2, NIST CSF and GDPR, and support customer questionnaires and external audits
- Lead and mentor the IS team, and run security awareness training across the company
- Report to senior management on security posture, risks and KPIs
What You’ll Need
- 8+ years of experience in information security, including 3+ years leading a security program or team
- Hands-on experience with IAM, DLP, endpoint protection, email security and SIEM/security monitoring tools
- Strong knowledge of cloud and SaaS security, ideally in Azure and Microsoft 365 environments
- Proven experience implementing or maintaining ISO 27001, SOC 2, NIST CSF or GDPR compliance
- Experience leading incident response, risk assessments, vendor reviews and audits
- Certifications: at least one of CISSP, ISO 27001 Lead Implementer or CIPM, plus ITIL v4
- Strong communication skills and the ability to explain risk clearly to senior management and non-technical teams
- A hands-on, ownership mindset: you build controls, not just write about them
