Our Mission
We are a technology consultancy built to drive impact. We help organizations reduce risks, accelerate results, and unlock competitive advantage through technology. Our services span IT managed services, custom software development, staff augmentation, and enterprise innovation.
We don't just deliver tech. We live it, breathe it, and build it with purpose. Every solution is designed to help businesses move faster, innovate smarter, and ensure continuity with confidence.
We're
Geared for Impact. Built for Belonging
. Always ready for what's next. We create impact through innovation and excellence, fostering a community built for success and belonging.
About the Role
As an
Information Security Lead,
you will be responsible for aligning and implementing information security initiatives with GBH's corporate programs and business objectives. You will oversee compliance with international standards, establish security policies and controls, and drive awareness programs that safeguard the confidentiality, integrity, and availability of information.
This role requires a balance of technical expertise, incident management, regulatory knowledge, and the ability to collaborate across teams and executives to ensure security and compliance are embedded into GBH's services and operations.
Objectives & Responsibilities
- Lead the Centralized Services function, ensuring alignment with GBH's information security and IT service objectives.
- Define, implement, and maintain policies, standards, and controls to protect GBH's information assets.
- Report on KPIs and service performance to leadership, highlighting risks, incidents, and improvements.
- Oversee compliance initiatives for ISO 27001, and client-specific requirements.
- Manage endpoint protection, device management platforms, and vulnerability remediation processes.
- Coordinate SOC operations, ensuring effective monitoring, detection, and response to security incidents.
- Monitor and optimize infrastructure and centralized IT services (patching, updates, automation).
- Standardize documentation, processes, and workflows to enhance service reliability and efficiency.
- Drive continual service improvement and process automation across the centralized services portfolio.
- Deliver Security Awareness Training and track participation across all collaborators.
- Collaborate with cross-functional teams (Service Desk, Engineering, Compliance, Service Delivery, and IT Professional Services) to embed security and IT standards into daily operations.
- Act as the liaison between technical teams, management, and stakeholders for security and compliance matters.
- Mentor and guide team members, promoting professional growth and accountability.
- Effectively manage conflicts, align priorities, and foster collaboration across departments.
- Communicate clearly with executives, managers, directors, and client stakeholders regarding risks, controls, and service improvements.
Requirements
- Bachelor's degree in Management Information Systems (MIS), Accounting, Computer Science, Finance, or equivalent experience.
- 2+ years of experience in Information Security, including establishing policies and controls.
- 2+ years of experience in Endpoint Protection Management, Device Management platforms, SIEM, and/or EDR management
- Experience with ISO 27001 and/or NIST Cybersecurity Framework.
- CompTIA Security+ certification (or equivalent).
- Ability to deliver and monitor Security Awareness Training.
- Advanced English proficiency.
- Excellent written and verbal communication skills.
- Highly analytical with strong attention to detail.
- Demonstrated ability to work autonomously and thrive in remote environments.
- Strong project management, prioritization, and multitasking skills.
- Solution-oriented mindset with a proactive approach to problem-solving.
- Incident and SOC management expertise.
- Experience managing & updating the incident playbook.
- Experience implementing and managing security solutions.
Benefits
Why Join GBH?
- Our Team:
We're a company that empowers people. Instead of rules, we have three company values to let you do what you do best. You're free to be passionate, innovative, collaborative, live a life of integrity, care for those you work with, and delight our customers. - Our Culture:
A friendly, fast-paced, and inclusive environment. We rely on an open and empathetic culture that constantly promotes the growth of our team. - Learning & Development:
We do our best to set the best baselines to accelerate your career. - Benefits & Rewards:
We strive to offer competitive, unbiased, and fair rewards for all our people. We empower you to manage your own time and promote flexible working opportunities, along with family-friendly policies.