R

RevOptimal

Audience intelligence and targeting

Information Security & IT Lead

Security Engineering & Architecture +1Updated on Nov 14
Full-timeNew Orleans, LA, USANo salary listedRemote

About the Job

Requirements

  • At least 6 years of professional experience in information security, including at least 3 years in a leadership or managerial role.
  • Hands-on cloud security experience with AWS, including S3, IAM, KMS, CloudTrail, CloudWatch, VPCs, and cross-account roles.
  • Experience leading SOC 2 readiness and audit programs and operating compliance automation tools.
  • Practical experience implementing Zero Trust principles in cloud environments.
  • Practical experience with GDPR and US state privacy laws, including CCPA/CPRA and/or other modern state privacy statutes, DSAR/DSR handling, DPIAs, RoPA, DPAs, and breach notification processes.
  • Operational security capabilities in vulnerability management, incident response, logging and monitoring, IAM, and encryption.
  • Practical IT operations experience for small companies, including MDM, SSO/MFA, and onboarding/offboarding.
  • Strong written and verbal communication skills.

Responsibilities

  • Define and execute the company security strategy and roadmap across cloud, data, application, and infrastructure security.
  • Lead the design and practical implementation of Zero Trust architecture principles, including identity-centric controls, least-privilege access, micro-segmentation, device posture, and conditional access.
  • Design and enforce secure cloud architecture patterns using AWS best practices for S3, IAM, KMS, VPCs, cross-account roles, and clean-room integrations.
  • Implement secure key management, encryption at rest and in transit, and data classification and retention standards for sensitive data.
  • Own SOC 2 readiness, audit lifecycles, and evidence automation.
  • Lead ISO 27001:2022 readiness and the ISMS lifecycle as appropriate, including scoping, risk assessment and treatment, SoA, and internal and external audits.
  • Own data privacy compliance frameworks across relevant US state privacy laws and EU GDPR.
  • Maintain a data map or Record of Processing Activities covering personal data flows, storage locations, retention, and processors.
  • Run Data Protection Impact Assessments for high-risk processing and partner integrations.
  • Operate a data subject request process for access, deletion, and portability requests, and ensure timely responses that meet legal deadlines.
  • Manage Data Processing Agreements and contractual privacy controls with vendors and partners.
  • Implement and enforce privacy-by-design/default controls and data minimization across technical and product solutions.
  • Ensure lawful cross-border data transfer mechanisms, including Standard Contractual Clauses, adequacy assessments, and technical safeguards, and document them appropriately.
  • Operate and maintain compliance automation and privacy management tooling, and track remediation and evidence collection.
  • Build and operate detection and monitoring, including centralized logging, alerting, and lightweight SIEM.
  • Manage vulnerability scanning, third-party penetration testing, remediation workflows, and risk treatment.
  • Secure onboarding and hardening of partner integrations, including S3 buckets, IAM roles, cross-account access, and clean-room patterns.
  • Assess and govern third-party security and privacy posture through technical and contractual controls.
  • Manage day-to-day IT for a company with fewer than 20 people, including device lifecycle, endpoint protection, SSO/MFA, Google Workspace/Slack/Atlassian administration, onboarding/offboarding, and enforcement of two-factor authentication.
  • Own vendor relationships for IT, security, and privacy services and provide escalated IT support.
  • Promote security and privacy across the company through training, phishing simulations, and privacy awareness.
  • Report security and privacy KPIs to executives, including SOC 2/ISO coverage, Zero Trust adoption, DSAR SLAs, and MTTR.

Desired Qualifications

  • A formal security certification such as CISSP or CISM.
  • Experience driving or supporting ISO 27001:2022 certification and managing an ISMS.
  • Privacy certifications such as CIPP/US, CIPP/E, or equivalent.
  • Experience designing and implementing Zero Trust at scale and familiarity with NIST SP 800-207.
  • Familiarity with privacy and governance tools such as OneTrust, TrustArc, or BigID, and SOC 2 automation tools such as Vanta.
  • Infrastructure-as-code experience with Terraform or CloudFormation and secure CI/CD pipelines.
  • Experience with global privacy topics, including Schrems II implications, Standard Contractual Clauses, and adequacy, and managing cross-border transfer risk.
  • Familiarity with CPRA and Virginia, Colorado, Connecticut, and Utah privacy rules and breach notification regimes.

About the Company

RevOptimal

Audience intelligence and targeting

RevOptimal is a marketing technology company providing audience intelligence and activation data. The company builds verified consumer and professional profiles, audience segments, targeting models, attribution, and measurement products. It serves advertisers, agencies, B2B marketers, healthcare marketers, political organizations, and revenue teams. Its operating model centers on data products and APIs connect identity, modeling, audience activation, privacy controls, and campaign analysis. Teams work across data engineering, machine learning, product, privacy, sales, marketing, and customer success. This structure supports consistent delivery across its products and services.

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at RevOptimal

See more jobs