Execo
Website:
execo.com
Job details:
Job Description
Lead security and Workplace IT for the entire company. You are the single operational owner of both domains across seven countries (US, UK, Singapore, Kenya, Philippines, India, South Africa), reporting directly to the COO and managing a direct line team of five across India, the Philippines, and Kenya.
- Security & Compliance Ownership: Set the global security strategy and stand behind it with enterprise clients. Own our SOC 2 Type II lifecycle end-to-end (defining trust services criteria, managing the formal CPA observation window, handling auditor fieldwork, and issuing the report), our continuous GRC platform (Vanta/Drata/Sprinto), annual penetration testing, incident response with the General Counsel, and security writing for every RFP and client audit.
- Policy Architecture & AI Governance: Own every policy and process document across security and IT from scratch. Write them, keep them version-controlled, run country-level phishing simulations, and enforce our global AI stance: defining acceptable-use policies, controlling data-class exposure in LLM environments, and governing embedded AI features inside existing software.
- Identity, Access & Zero Trust: Set and enforce the global standard for identity and access management across Google Workspace (Super-Admin level), Microsoft 365, Entra ID, and modern Zero Trust/SASE engines (Chrome Enterprise Premium, BeyondCorp, Zscaler, or Cloudflare Access).
- 24/7 Workplace IT Operations & HRIS Automation: Own global IT service delivery across all time zones. Oversee the Jira Service Management (JSM) queue and ticketing SLAs, build zero-touch HRIS-to-IT automated Joiner/Mover/Leaver (JML) provisioning workflows, and manage global asset lifecycles from procurement to disposal.
- Subscription & Spend Governance: Partner with Finance to own the global software subscription model. Track spend per country entity/team, negotiate renewals, and proactively eliminate unused seats. You are expected to bring documented OPEX savings, not just invoices.
- Team Leadership & DR: Direct and mentor a 24/7 multi-country team covering US, European, and Asian hours. Establish tested BCP/DR plans per legal entity and deliver monthly reporting to the COO on service SLAs, risk posture, compliance, and subscription spend.
Mandatory Requirements
- 8+ Years Experience & Executive Ownership: Must have held sole operational accountability for both IT Operations and Information Security for a company or large division.
- Multi-Country Direct Team Lineage (Gate Requirement): Must have held direct line-management and performance review accountability for staff physically located across more than one country.
- End-to-End SOC 2 Type II Ownership (Hard Requirement): Must have directly owned a live SOC 2 Type II audit cycle from start to finish with an external CPA firm (scoping, observation window management, evidence collection, and final report delivery). Experience limited solely to ISO 27001, NIST, or PCI-DSS will not satisfy this requirement.
- Continuous Compliance Platforms: Hands-on administration of automated GRC platforms (Vanta, Drata, or Sprinto) for continuous evidence collection.
- Workplace IT & Cloud Identity: Hands-on Google Workspace Super-Admin settings administration (OUs, SAML SSO, sharing rules) alongside Microsoft 365 / Entra ID.
- Zero Trust Enforcement: Production experience configuring modern Zero Trust / SASE engines (Chrome Enterprise Premium, BeyondCorp, Zscaler, or Cloudflare Access).
- Jira & HRIS Automation: Direct queue administration in Jira Service Management (JSM) with demonstrated experience building automated HRIS-to-IT user provisioning workflows.
- Subscription Cost Management: Proven track record of managing software subscription budgets and delivering quantified before/after license spend savings.
- Client Security Assurance: Experience representing the company in enterprise client security assessments, RFPs, and security questionnaires.
- Desirable: ISO 27001; GDPR, PDPA, DPDP, POPIA; CISSP, CISM, or CCSP; scripting in Apps Script, Python, or PowerShell.
Click on Apply to know more.
