Information Technology & Cybersecurity Manager

Job Type Full-time Description

The Information Technology and Cybersecurity Manager plays a key role to support commonFont's future growth and success, responsible for leading the Information Technology & Security function at commonFont. This includes setting an ambitious vision and roadmap for future development while maintaining present technology and information security infrastructure.

commonFont’s IT & IS department provides mission critical technology (e.g. hardware, network and applications) to support the needs of our employees and their client teams. Our teams work with enterprise customers to maintain and evolve their Experience Management programs, hosted on third party SaaS platforms. Our employees work across two locations - Bozeman, MT and Providence, RI - to serve clients globally.

You are a detail-oriented and hands-on professional who establishes and achieves ambitious goals, develops genuine relationships with people, and goes deep to solve problems. You build trust and credibility through your alignment with commonFont values, commitment to service leadership and collective success, and demonstrated ability to advance a high performance environment and team that helps our organization win. You are self-directed and work with a high degree of initiative and perseverance. Your responsibilities will include: 

• Create a 1-3 year strategic plan and IT & IS development roadmap in partnership with executive management that is well aligned with business objectives
• Implement, manage, and evolve commonFont’s technology resources and governing policies to support our Information Technology and Security objectives
• Ensure network uptime and effective IT support to commonFont team members
• Manage external relationships with technology vendors and other third party service providers to assess, procure, and manage solutions in support of commonFont business objectives
• Support development of the IT & IS budgeting process, and monitor KPIs aligned with business objectives
• Partner with commonFont business stakeholders to assess application performance relative to cost; regularly audit application effectiveness
• Manage security incidents, investigate security concerns, and provide post-incident analysis and report
• Manage and improve physical site/location access and high value asset management
• Collaborate with client and sales stakeholders to complete routine security questionnaires
• Ensure applications and access procedures meet best-in-class information, compliance, and risk management standards (e.g. SOC2, ISO)
• Educate team members of new threats, industry trends, and applicable laws related to security, and manage security training for the organization
• Operate with a continuous improvement mindset to leverage opportunities for automation across compliance and risk processes, procedures, and systems
• Engage with flexibility, agility, and collaboration across teams, functions, and colleagues
• Contribute ideas, energy, passion, and commitment to build commonFont, and contribute to a fun, rewarding high-performance culture that encourages us to learn, improve, excel, and evolve

Requirements

You are a passionate, curious, and versatile professional with a commitment to achieving exceptional results in a fast-paced, evolving, and high-performance environment. You set high standards for yourself and your teams, and are entrepreneurial, self-directed, and driven to make an impact. You are empathetic and care deeply about service to clients and others.

• Bachelor’s degree in computer science, IT & IS management, Cybersecurity, or related field. Graduate degree, Certified Information Systems Security Professional (CISSP) certification or equivalent professional experience is a plus.
• 7-10+ years professional experience, including managing networks, IT infrastructure, cyber security, and/or IS Infrastructure
• Demonstrated success implementing, managing, and evolving information technology infrastructure and governing policies to meet evolving business needs
• Direct experience engaging with security questionnaires and certification processes (e.g. SOC2 and ISO)
• Experience working as a contributor to high functioning IT & IS organizations
• Excellent communicator, with the ability to break down complex challenges into actionable initiatives
• Strong spirit of service; you demonstrate the desire to go the extra mile to support team success
• Flourish working in a “startup” environment. Take initiative in the absence of guidance. Demonstrated ability to assess situations and act, including when faced with imperfect information or ambiguity.
• Work collaboratively and cross-functionally in a way that demonstrates initiative and resourcefulness
• Lifetime learner seeking to expand abilities to e