IT Security Engineer

About ONX Homes:

ONX Homes is an integrated Design Tech company on a mission to reshape the home building industry. Founded by construction experts, design thinkers, and technology leaders, we utilize human-centric design, environmentally conscious materials, and offsite manufacturing technology to create beautiful homes and sustainable communities. We partner with landowners and leverage our unique vertically integrated capabilities and advanced offsite construction facilities to build and deliver sustainable, high-quality homes in half the time of onsite construction.
 

Recruitment Policy:

ONX Homes will recruit based on merit and in compliance with all relevant legislation and is committed to recruitment and selection processes that are open, competitive, and based on merit. We are committed to valuing diversity and promoting equality.

ONX Homes is looking for an IT Security Engineer to join our team.
The N&SM is responsible for establishing and maintaining a corporate wide information security management program to ensure that information assets are adequately protected. This position is responsible for identifying, evaluating, and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of ONX Group of Companies.

Responsibilities:

• Manage IT Security Operations budget and resources and participate in IT planning and project management.
• Strengthen and formalize security processes both within the security team and with other supporting resources.
• Oversee and manage security projects including design, implementation, and integration of new or upgraded technologies.
• Manage industry best practice guidance and security hardening guidelines for all technologies.
• Manage the Identity and Access Management (IAM) Program.
• Working closely with cross-functional teams to communicate and integrate control requirements (IT, General Counsel, HR, Finance, others, etc.);
• Managing all internal and external security compliance engagement activities.
• Managing, documenting, and communicating compliance requirements, timelines, and road map to supporting teams and leadership.
• Leads the effort to develop, enhance and implement security training program based on policies.

• Communicating the compliance posture and effectiveness to management on a scheduled basis.
• Developing and working with supporting teams to design and implement an automated control strategy and exception reporting process.

Required Qualifications:

• Professional Security Certification (e.g., CCNA, CCNP, MCITP/MCSE, CCSP, CompTIA Security+, CISSP, GIAC, CISM) required.
• Fundamental knowledge of web applications protocols (and web services frameworks (JAVA, APACHE, .NET);
• Bachelor s or Master s degree in Information Technology and or commensurate experience in delivering security solutions.
• Overall Enterprise IT Security experience of 8+ years preferred.
• Absolutely trustworthy with high standards of personal integrity (demonstrated by an unblemished career history, lack of criminal convictions etc.), willing to undergo vetting and/or personality assessments to verify this if necessary
• Typically, a background in technical security roles or operations, with a clear and abiding interest in security
• Excellent experience with Enterprise firewalls (PaloAlto- Must)
• Experience with Splunk, CrowdStrike, Proofpoint is a plus.
• Experience with multi-factor authentication, intrusion detection, and managing threat intelligence.
• Strong decision-making skills and excellent analytical ability.
• Ability to make a business case and hire, train, and build a strong IT Security Team; lead and manage technical personnel.
• Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance, and professionalism.
• Must be willing to work in a start-up environment and extend support / responsibilities to other IT functions.
• Industry knowledge of border testing, security policies, DR procedures & policies, remediation strategies and risk assessment are required.
• Ability to complete work to given quality standards by agreed-upon deadlines.
• Knowledge of JIRA is a plus.
• Ability & desire to learn new product lines and technologies quickly & efficiently.
• Strong knowledge of IT controls, including security concepts and terminology related to applications, databases, operating systems, and IT operations.
• Experience with data protection & archiving, disaster recovery, business continuity and implementation.
• Strong written communication skills, demonstrating the ability to write with purpose, clarity, and accuracy.
• Must be able and willing to write and deploy security policies and procedures.

If this sounds like you, you should apply right away so we can discuss how you can be a part of this exciting, fast-paced organization!

ONX is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.