Director of IT Security

Merlin is the aviation technology company building the definitive autonomy system for all things that fly. Our mission is to create the world's most capable pilot leveraging technology as the key enabler of air network resiliency.

Founded in 2018, Merlin is backed by some of the top institutional venture capitalists in the country. We are headquartered in Boston with additional offices in Denver, Kerikeri (NZ), and Mojave. Merlin is a fast–paced environment with a world–class team of pioneers from companies including Airbus, Boeing, Google, the U.S. Navy, the U.S. Air Force, and United Technologies Corporation. Come, join our team, and make meaningful and historic leaps in aviation.

Responsibilities:

1. Creation and execution of security strategies that will increase the efficiency of IT systems and projects at Merlin.
2. Directing crisis management by investigating the cause of a breach and implementing the right solutions.
3. Allocating the correct resources to ensure that staff are delivering secure solutions.
4. Managing cybersecurity activities within the organization.
5. Overseeing vulnerability audits, penetration tests and forensic IT investigations, ensuring that any outcomes are understood and applied.
6. Liaising with other senior level directors, the ELT, and C3 to ensure that new systems align with the organization's overall security policies and data protection strategies.
7. Ensuring that staff security training and compliance efforts are up to date.
8. Preparing budgetary allocations and financial forecasts relating to cybersecurity.
9. Managing partners, stakeholders, vendors and third party solutions providers.

Qualifications:

1. Bachelor's or Master's Degree in Computer Science/Information Technology or equivalent work experience.
2. Knowledge of process engineering, project management, ITIL, CoBIT.
3. Minimum 8 years of experience in the information security field with at least 5 years experience in a management capacity.
4. Strong security background (understanding risk assessment, legal and regulatory requirements, threats, vulnerabilities, security policies).
5. Minimum 3 years experience with DoD cyber security requirements (CMMC, DFARS, SPRS).