Keystone is a premier consulting firm that combines economics, technology, and strategy to solve complex challenges facing global brands. We impact society on a global scale by working at the forefront of influential technology cases changing consumer behavior and regulation laws. We also provide value by delivering insights and product that defines the future of the technological ecosystem. Keystone brings an interdisciplinary approach, leveraging the intersection of economics, software and technology, and business strategy to deliver transformative ideas.

At Keystone we believe everything is an opportunity for creativity. Transformative ideas can contradict common knowledge. Work hard and be nice to people. Trust can get through catastrophe. Impact takes work. It is never too far gone to salvage. We can deliver anything. Unprecedented outcomes come from unconstrained thinking.

The Keystone Labs technology team productionizes Keystone’s IP and orchestrates new growth initiatives. Serving both internal and external clients, we work to build the next generation of systems that manage risk, create efficiency, and improve transparency within the firm and across our broad community of experts and clients.

IT at Keystone is nimble and entrepreneurial - our open, iterative design processes and rapid pace of development mean that everyone on the team has the opportunity to make an impact from day one. We are problem solvers who can take projects from idea to implementation. We believe in active mentoring and developing excellence. We collaborate to find the best answers for our customers and for Keystone. We are critical to the firm maintaining its competitive edge. As a member of the IT team at Keystone, you will work with a group of talented individuals in a highly team-oriented environment to create the next generation of innovative solutions for Keystone and its clients. You will play a pivotal role in all technical decisions related to security and compliance. You will also serve as a key decision maker and problem solver, who can consult widely, synthesize information from multiple sources, formulate options and drive complex problems to a solution. In order to be successful, you will leverage your strong technical knowledge and experience.

This position is a great opportunity to leverage your entrepreneurial background and successful work experience in Information Security, data science, and software to help shape Keystone’s next stage of growth. The Information Security Manager understands the firm’s data and cyber security strategy and works to develop, manage, and administer our firm-wide security program. Using their business acumen, the IS Manager assesses security risk while considering the firm’s business operational needs and adherence to regulatory compliance. They will utilize various tools and methods to provide support to the firm’s users, project teams, and external experts on a regular and ad-hoc basis. They will work collaboratively across the firm to conduct information security activities such as, but not limited to, analyzing information security risk and threat data, monitoring and investigating anomalies, developing security controls and risk mitigation responses, establishing standard protocols, and determining information security-related business needs and requirements for projects. The IS Manager also effectively creates information security frameworks, business continuity, physical security, data protection, information security training, intrusion prevention, data loss prevention, incident response/crisis management, and reporting using various industry leading tools.

Responsibilities

• Cybersecurity - Operationalize Information Security Controls, Policies and Procedures
• Develop, evangelize, and monitor the adoption of sound cloud security practices
• Support internal security and product security incident response
• Vendor security management, vulnerability management, and risk assessment
• Automate security controls using scripting
• Create, manage data governance policies within company's SaaS/Cloud products (Azure, M365, Box, AWS, JupiterOne and alternatives)
• Deploy, build, and/or operate security infrastructure solutions to help scale the security program
• Develop, implement, maintain, and test access controls necessary to protect network perimeter, host systems, software applications, and sensitive data in accordance with security requirements
• Industry Compliance: Obtain and maintain compliance certifications
• Create roadmap to identify the key certifications and maintain industry certifications (including SOC 2, HIPAA, ISO 27001, and FedRAMP) for Keystone’s consulting practices and cloud infrastructure
• Manage client specific compliance … e.g. Microsoft, AWS, GCP
• Data Governance & Knowledge Management: Governing Firm’s intellectual property:
• Develop solutions within a product organization that will require you to engage in product management activities

Preferred Qualifications

• BS in Computer Science, Information Systems, Information Security or a related technical field, or equivalent work experience
• 5 years of experience in information security, including development of security tooling and infrastructure or security architectures, principles, and assessment methodologies
• Experience with Infrastructure as a Code with tools like Terraform or CloudFormation and DevOps automation
• Experience building tools or automation to reduce repetitive work
• Familiarity with cloud service APIs
• Demonstrated ability to drive improvement within systems, codebases, or organizations with a focus on solving problems.
• Ability to take ownership of project tasks, collaborate on work, and deliver on schedule
• Results-oriented, high energy, self-motivated

US Salary Range: $110,000 - $200,000, plus an annual discretionary bonus, generous 401k contribution, and competitive benefits package. Actual compensation within the range will depend upon the level the individual is hired into based on their skills, experience, qualifications.

At Keystone we believe diversity matters. At every level of our firm, we seek to advance and promote diversity, foster an inclusive culture, and ensure our colleagues have a deep sense of respect and belonging. If you are interested in growing your career with colleagues from varied backgrounds and cultures, consider Keystone Strategy.