• Managing and overseeing the IT systems and software used by the Company and ensuring compliance with the policies • Monitoring the Company’s systems for potential and/or suspected security concerns • Developing and updating the Information Sensitivity Policy of the Company • Developing and updating the procedures to be followed by employees • Providing training in relation to data protection and the proper use of the Company’s systems • Working with an international Helpdesk team based in various countries across the world • Provide end to end support for end users whilst troubleshooting user issues using a variety of support tools including remote administration on workstations, laptops and virtual desktops • Following defined processes in terms of incident logging and ticketing ensuring tasks are completed and resolved within agreed service levels. • Assist in the formulation and development of process improvements and enhancements • Tracking issues with vendors and providers to successful completion • Handle workstation, laptop and server operating system patching • Provide feedback for continuous improvement of the incident tracking process • Provide regular status updates to the IT Technical Manager and the IT Operations team

• Lead the planning and execution of offensive security testing across web applications, APIs, infrastructure, and networks. • Conduct manual and automated penetration testing and vulnerability assessments; document findings and guide remediation. • Work with DevOps, architects, and engineering leads to embed security throughout CI/CD, infrastructure, and data workflows. • Plan and run regular security audits and threat modeling sessions; coordinate with third-party firms when needed. • Proactively identify and resolve security gaps in complex, custom systems spanning cloud and on-prem environments. • Design, implement, and maintain security controls, tooling, and detection capabilities that scale with the business. • Develop roadmaps for security certifications (e.g., HIPAA, SOC 2, ISO 27001) and lead technical implementation efforts. • Manage incident response procedures, conduct postmortems, and implement long-term prevention measures. • Create and maintain high-quality documentation for security processes, infrastructure risks, and compliance status. • Stay current on threat landscapes, tools, and best practices relevant to ecommerce, health data, and hybrid infrastructures.

• Identifying and qualifying new federal business opportunities in alignment with company capabilities and growth strategy. • Building and maintaining strong relationships with federal agency stakeholders, system integrators, and teaming partners. • Leading capture and proposal efforts in coordination with internal technical and operational teams. • Monitoring government procurement portals (e.g., SAM.gov, SBIR.gov, etc.) and industry forecasts to proactively position for upcoming opportunities. • Representing the company at federal contracting and industry events, conferences, and meetings. • Maintaining accurate and current pipeline data in CRM systems and provide regular opportunity and forecast updates to leadership. • Collaborating cross-functionally to shape offerings, pricing strategies, and win themes based on customer requirements. • Staying current on federal contracting trends, acquisition regulations, and market shifts affecting target agencies.

• Define, own, and execute the global information security strategy aligned with Netwrix’s business goals and customer commitments. • Act as a trusted advisor to executive leadership and the Board on security risk, threat landscape, and compliance. • Oversee the design, implementation, and continuous improvement of enterprise security monitoring solutions (e.g., SIEM, SOAR). • Ensure robust detection, analysis, and response capabilities that protect both internal operations and customer-facing services. • Lead security strategy for cloud and hybrid cloud architectures, ensuring SaaS and on-premises solutions are secure, scalable, and resilient. • Collaborate with engineering teams to embed security into product design and operations, driving secure-by-default practices. • Own IAM strategy and execution, including identity lifecycle, credentialing, SSO, MFA, and privileged access. • Direct vulnerability management programs across infrastructure, applications, and products. • Lead the global incident response program, including playbooks, readiness exercises, and cross-functional coordination. • Own business continuity and disaster recovery (BC/DR) planning and testing, ensuring organizational resilience and customer confidence.