Role Description Fusion92 is an award-winning Marketing Transformation Partner that helps brands solve complex business challenges through data, technology, and innovation. We move fast, think boldly, and embrace a culture that rewards curiosity and fearless problem-solving. As we continue to deepen our investment in AI and data-driven initiatives, we are expanding our security function to match that ambition. The right candidate is someone who lives and breathes security, serving as a trusted authority on both current threats and the evolving landscape. This role carries real organizational weight: the security champion for a company at the leading edge of AI and marketing innovation, responsible for ensuring that as Fusion92 pushes forward, it does so with the controls, visibility, and confidence to back it up. This is a cross-departmental role spanning IT & Technical Operations, Platform, Product & Innovation, and Compliance. Day-to-day security operations are part of the job, but so is the bigger picture: - Identifying gaps - Governing the security implications of AI adoption - Shaping how we mature our infrastructure - Contributing meaningfully to where Fusion92 goes next This candidate will have real latitude to recommend and implement improvements, and the opportunity to build security capability across the broader team over time. Qualifications - 3+ years of hands-on experience in IT security operations or security administration - Working knowledge of Microsoft Entra ID (Azure AD), including Conditional Access, PIM, sign-in log analysis, and identity protection - Hands-on experience with endpoint security platforms such as SentinelOne, CrowdStrike, or equivalent EDR/EPP tools - Experience with SIEM platforms and vulnerability scanning technologies - Working knowledge of Linux systems, including command-line proficiency and familiarity with common security and administrative tasks in Linux environments - Working knowledge of network security concepts, operating system security, and cloud security principles - Familiarity with compliance frameworks such as SOC 2, NIST, ISO 27001, or CIS Controls for gap analysis purposes - Strong communication skills, with the ability to translate technical findings for both IT peers and non-technical stakeholders - Self-directed and accountable, with the ability to manage competing priorities in a high-alert-volume environment Requirements - Familiarity with AI security considerations, including data governance, third-party AI integration risks, and acceptable use policy frameworks - Experience with SAML/OIDC SSO configurations and enterprise app integrations in Entra ID - Familiarity with Huntress, Blumira, or Mimecast - Experience in a marketing transformation, professional services, or technology-driven environment - Bachelor’s degree in Information Technology, Cybersecurity, or a related field, or equivalent experience - Industry certifications such as CISSP, CompTIA Security+, CEH, GIAC, SC-200, or equivalent Microsoft or cloud security credentials

• The Lead Information Security Engineer is a senior cybersecurity leader responsible for protecting the organization’s digital ecosystem across product development, manufacturing, and enterprise IT systems. • This role ensures the security of connected medical/surgical devices, intellectual property, and regulated environments, while maintaining compliance with cybersecurity guidance, ISO standards, and global regulations. • This position plays a critical role in enabling secure product innovation, patient safety, and operational resilience across the device lifecycle. • Lead detection and response for incidents affecting: manufacturing systems (OT/ICS), connected medical/surgical devices, and enterprise IT environments • Manage SOC operations with prioritization of IT security, production integrity, and supply chain impact • Investigate and respond to incidents involving intellectual property theft, disruptions and/or ransomware affecting production lines, and IT vulnerabilities

• Develop, maintain, and evolve enterprise data security and data loss prevention architectures aligned to business objectives, regulatory requirements, and data classification standards. • Champion the integration of datacentric security controls across endpoint, identity, collaboration, storage, and data platforms, ensuring secure by default and least privilege principles. • Design and operationalize Microsoft Purview Information Protection and DLP capabilities, including sensitivity labeling, classification, policy enforcement, and user experience considerations. • Architect and implement Microsoft Defender capabilities (Endpoint, Identity, Office 365, Cloud Apps) to protect data throughout its lifecycle. • Serve as a senior technical authority for data security and DLP across Windows, macOS, Windows Server, and Linux environments, ensuring consistent enforcement across heterogeneous platforms. • Integrate Microsoft Security capabilities with complementary platforms such as Varonis Data Security to provide comprehensive data protection. • Author and maintain data security and DLP standards, reference architectures, and technical guardrails aligned to NIST and internal security frameworks. • Convert business risks and regulatory obligations into technical requirements and traceable, measurable mitigation strategies. • Evaluate new platforms, tools, and vendors for strategic fit, security posture, and architectural impact. • Provide technical leadership, mentorship, and escalation support for complex data security and DLP challenges. • Communicate control posture, risks, and recommendations clearly to engineering, audit, and leadership stakeholders. • Continuously assess and improve data security posture through metrics, dashboards, and control validation. • Collaborate with PKI teams to manage certificate lifecycle operations, including issuance, renewal, revocation, and inventory. • Perform other duties as assigned.

• Define the architecture and technical strategy for Databricks' AI security tooling platform • Lead the design and development of AI platform capabilities • Serve as the technical authority on AI security engineering • Mentor senior and mid-level engineers