About FTC Solar Inc
FTC Solar is a fast growing, global provider of solar tracker systems, technology, software, and engineering services. We are as passionate about renewable energy as we are about our culture and values. We want to attract likeminded individuals who live and breathe Integrity, Accountability, Innovation and Excellence. We’re humble enough to know that we don’t know everything, so we love bold ideas that disrupt the status quo. Basically, we don’t want you to just fall in line!
FTC Solar is committed to creating a culture of inclusion and diversity. For us, this is not just a set of words or metrics. It drives our culture, creativity, and future success. We support our employees and foster an environment where new ideas and perspectives are celebrated and encouraged. When our employees thrive, FTC Solar thrives. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.
Job Summary:
We are looking for a proactive and detail-oriented Security and Compliance Administrator to join our team. This role focuses on managing cybersecurity operations and ensuring IT compliance. You will leverage Microsoft security tools to safeguard our IT environment while conducting quarterly SOX and ITGC audit control testing. This is an excellent opportunity for a skilled professional to make an impact in a dynamic and fast-paced global organization. This is not a general sys admin role. You must have proven experience in a security role using Microsoft security products.
Key Responsibilities:
Security Administration:
- Manage and monitor Microsoft Defender solutions, including Defender for Endpoint, Defender for Office 365, Defender for Cloud, Defender for Cloud Apps.
- Configure and enforce security policies, including conditional access, MFA, and endpoint compliance.
- Investigate and respond to security threats, performing advanced hunting using KQL scripts.
- Optimize and maintain Microsoft Sentinel for threat detection and incident response.
- Proactively identify and mitigate vulnerabilities across endpoints, cloud services, and networks.
Compliance and Audit:
- Execute quarterly SOX and IT General Controls (ITGC) testing to validate control effectiveness.
- Document and maintain compliance evidence for audits, ensuring accuracy and audit readiness.
- Collaborate with internal and external auditors to support audit processes.
- Identify and help remediate gaps in IT controls or findings from audits.
- Stay updated on regulatory frameworks, such as SOX and ISO 27001, and recommend best practices for compliance.
Collaboration and Reporting:
- Provide regular reports on security incidents, compliance metrics, and audit readiness to global IT leadership.
- Work with cross-functional teams to ensure security initiatives align with business objectives.
- Keep up to date with the latest cybersecurity threats, trends, and compliance requirements to recommend improvements.
Qualifications:
Technical Skills (You will be tested on these):
- Proficiency with Microsoft security tools, including:
- Microsoft Defender suite (Endpoint, Identity, Cloud, Office 365).
- Microsoft Sentinel for SIEM and advanced threat detection.
- Azure Active Directory and related identity and access management policies.
- Strong understanding of compliance frameworks (e.g., SOX, ISO 27001, NIST CSF).
- Experience with ITGC testing and SOX control areas, including access management, change management, and data protection.
Education and Experience:
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- 3-5 years of experience in cybersecurity, compliance, or IT audit roles.
- Experience with audit management tools (e.g., Diligent Highbond) is a plus.
Certifications (preferred):
- Microsoft Certified: Security Operations Analyst Associate (SC-200).
- Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900).
- Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP).
WORKING CONDITIONS
FTC Solar offers competitive wages, growth opportunities, and a comprehensive benefits package.