Senior Security Program Lead

Senior Security Program Lead at GlobalSource IT Senior Security Program Lead at GlobalSource IT in West Columbia, South Carolina Posted in 1 day ago.

Type:

full-time

Job Description:

Senior Security Program Lead Full-time | Onsite | Columbia, SC US or GC Holder | NO C2C Summary Our client is seeking an Information Security Administrator to help strengthen and advance their organization's security posture across infrastructure, cloud environments, applications, and emerging technologies. This is a highly visible, hands-on role that combines security operations, vulnerability management, identity and access management, incident response, and security engineering responsibilities. The ideal candidate is a proactive security professional who enjoys solving complex problems, partnering with cross-functional teams, and driving meaningful security improvements. You will work closely with IT, engineering, legal, and business stakeholders to identify risks, implement controls, improve processes, and help ensure the organization remains secure as technology continues to evolve. This is an excellent opportunity for someone who wants to make a measurable impact while working with modern security technologies, cloud platforms, and AI-related initiatives. Key Responsibilities Security Operations & Risk Management

• Identify, assess, remediate, and validate security vulnerabilities across systems, cloud platforms, endpoints, and applications.
• Monitor security alerts, investigate suspicious activity, and support incident response and remediation efforts.
• Conduct security risk assessments and partner with stakeholders to implement mitigation strategies.
• Support security awareness initiatives and promote best practices throughout the organization. Security Engineering & Infrastructure Protection
• Implement and maintain security controls, system hardening standards, and least-privilege access practices.
• Manage and optimize security technologies, including EDR, SIEM, vulnerability management, MFA, and DLP platforms.
• Ensure timely patching and remediation of identified vulnerabilities.
• Assist with security architecture reviews and recommendations for new technologies and business initiatives. Identity & Access Management
• Support identity and access management processes, including access reviews, permissions management, and governance activities.
• Partner with IT teams to maintain secure authentication and authorization practices across enterprise systems. Cloud & Emerging Technology Security
• Support security initiatives across Microsoft 365, Azure, AWS, and other cloud environments.
• Collaborate with AI and data teams to help ensure secure development and deployment practices.
• Evaluate AI tools and emerging technologies for security, privacy, and data protection risks.
• Recommend and implement safeguards to support responsible technology adoption. Governance, Compliance & Continuous Improvement
• Assist with audits, compliance initiatives, and third-party risk assessments.
• Help develop, maintain, and enforce security policies, standards, and procedures.
• Contribute to ongoing efforts to improve security processes, controls, and operational maturity.
• Translate technical findings into practical, business-focused recommendations for stakeholders. Qualifications Required
• 7+ years of experience in Information Security, IT Security, Cybersecurity, or a related field.
• Hands-on experience implementing and managing security controls and endpoint security solutions.
• Strong understanding of Identity & Access Management (IAM) concepts and best practices.
• Experience securing cloud environments, including Microsoft 365, Azure, and/or AWS.
• Experience with vulnerability management, patching, and remediation processes.
• Familiarity with SIEM technologies such as Splunk, Microsoft Sentinel, or similar platforms.
• Experience supporting or participating in security incident response activities.
• Strong understanding of networking, operating systems, and system administration fundamentals.
• Ability to communicate technical risks and recommendations to both technical and non-technical audiences. Preferred
• Experience with scripting and automation using PowerShell, Python, Bash, or similar languages.
• Security certifications such as Security+, SSCP, CySA+, CISSP, or related credentials.
• Experience with AI security, data privacy, governance, or third-party/vendor risk management.
• Exposure to security frameworks, compliance programs, and audit activities. What Success Looks Like
• Security risks are identified and remediated efficiently.
• Security tools are optimized and providing meaningful visibility.
• Vulnerability and patch management processes are operating effectively.
• Security controls are consistently applied across cloud and on-prem environments.
• Stakeholders view security as a trusted business partner.
• The organization continues to improve its security maturity while enabling business growth and innovation. Why Join The Team?
• Play a critical role in protecting a growing enterprise and its customers.
• Work with modern cloud, security, and AI technologies.
• Partner with leaders across IT, engineering, legal, and business functions.
• Influence security strategy while remaining hands-on with technology.
• Join a collaborative team focused on continuous improvement and operational excellence.
• Competitive compensation, benefits, and opportunities for professional growth.