Own endpoint security for approximately 1,200 macOS and Windows devices managed through Intune and Jamf. Responsibilities include endpoint hardening, application allowlisting and governance, vulnerability and patch management, device compliance, data protection, audit evidence, reporting, and automation. The role partners with IAM, Security, Engineering, and Product teams while using Nexthink to measure employee experience and build self-service remediation.

Lead IAM strategy and a small engineering team to govern identities and access across the corporate estate. Own IAM governance, RBAC and SoD standards, access reviews/certification, privileged access/JIT, non-human identity governance, and platform operations (Entra ID, Okta). Partner with CISO, IT, and Internal Audit to drive roadmap, SaaS onboarding, audit readiness, and metrics-driven reduction of standing and orphaned accounts.

Lead corporate security for identity, endpoints, cloud and SaaS integrations. Architect passwordless and Zero Trust, manage MDM/EDR/EDR/XDR, tune SIEM, run vulnerability management, lead detection and response, automate workflows (Python/PowerShell, Terraform), maintain IaC hardening, and support audits, training, and vendor security assessments.