Oversee the security of The Trevor Project’s systems, data, and other digital assets.
Direct contributor to the overall organizational Information Security Program.
Support the security strategy plan and ensure compliance with security frameworks.
Monitor cloud based systems for security issues and deploy security tools.
Manage the Security Awareness Training Program and investigate security issues or breaches.

Requirements

5 or more years of combined education, work, and/or certification experience with demonstrated expertise in Information Security planning, implementation, and maintenance.
Proficiency in:
Implementing SOC 2/ISO27001, or other security compliance frameworks.
Developing and maintaining technical processes for data governance, retention, and deletion in a cloud environment (GCP/AWS/AZURE)
Security Awareness Training Program Management
Automated Threat Detection, Response, and Remediation Programs
Security Audit and Investigation process
Asset Management Lifecycle
Data Management Lifecycle
Vulnerability Assessment and Management
Threat Intelligence and Management
Business Continuity and Disaster Recovery
Proficiency in spoken and written English

Benefits

Comprehensive health coverage, including plans that support various gender affirmation care needs
Mental health resources, with access to virtual care and a variety of in and out of network options for support
403(b) retirement plan with a 3% employer match, vesting over three years
Generous paid time off and company holidays to rest and recharge
Employee Assistance Program (EAP) offering confidential emotional support, work-life solutions, financial and legal guidance, and online resources
Remote work flexibility from anywhere in the continental U.S., Alaska, or Hawaii- with provided technology, a home office setup reimbursement, and a monthly internet reimbursement

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information SecuritySOC 2ISO27001Data GovernanceCloud EnvironmentAutomated Threat DetectionVulnerability AssessmentThreat IntelligenceBusiness ContinuityDisaster Recovery

Soft Skills

CommunicationTraining ManagementProblem SolvingInvestigation