We are looking for an experienced Director of Cybersecurity to lead and strengthen a comprehensive security program for a healthcare and biotech organization in West Valley City, Utah. This contract opportunity with potential for a permanent role is ideal for a strategic leader who can balance long-term security direction with hands-on operational oversight in a regulated environment. The role will guide enterprise security priorities, reduce organizational risk, and partner with senior stakeholders to align cybersecurity efforts with business objectives.<br><br>Responsibilities:<br>• Lead the development and execution of enterprise cybersecurity strategies that protect systems, data, and business operations across the organization.<br>• Direct daily security operations, ensuring effective monitoring, threat detection, incident response, and vulnerability reduction activities.<br>• Oversee security architecture across cloud, network, application, and enterprise environments to improve resilience and reduce exposure to risk.<br>• Manage and mentor internal security team members and external service providers, driving accountability, performance, and operational excellence.<br>• Partner with executive leadership to assess technical risks, translate security concerns into business impact, and support informed decision-making.<br>• Coordinate audit readiness efforts and guide remediation initiatives related to security controls, compliance findings, and regulatory expectations.<br>• Establish and refine processes for vulnerability management, security investigations, and continuous improvement of defensive capabilities.<br>• Support modernization efforts such as cloud adoption, platform transformation, or other major technology changes by embedding security requirements into execution plans.
<p>Want to build security, not just maintain it?</p><p>This isn’t a role where you’ll inherit a mature security program, spend your days updating policies, or stay buried in one narrow piece of the environment.</p><p>We’re looking for an experienced security focused<strong> Systems Engineer</strong> who wants to take real ownership of security and compliance while staying hands-on with the technology behind it.</p><p>You’ll serve as a go-to security expert across the organization, partnering closely with IT leadership to strengthen the security program, advance CMMC and NIST compliance, and tackle infrastructure and systems initiatives along the way.</p><p>And yes, there’s a pretty great perk: <strong>work four 10-hour days and get a three-day weekend every week.</strong></p><p><br></p><p>Why This Role Is Different</p><p>This is a <strong>newly created position</strong>, which means there’s an opportunity to put your fingerprints on the security program rather than simply stepping into someone else’s playbook.</p><p>You’ll have:</p><ul><li><strong>Ownership:</strong> Help build, mature, and operationalize the security and compliance program.</li><li><strong>Executive visibility:</strong> Work closely with IT leadership and the CTO on security strategy, risk, and framework roadmaps.</li><li><strong>Hands-on technical work:</strong> Security is the priority, but you’ll still work with systems, infrastructure, identity, endpoints, networking, Microsoft 365, and cloud technologies.</li><li><strong>Autonomy:</strong> You’ll be trusted to own projects, make recommendations, communicate risk, and drive initiatives forward.</li><li><strong>Variety:</strong> Work across security, compliance, infrastructure, and systems rather than being siloed into one narrow function.</li><li><strong>A 4/10 schedule:</strong> Four workdays. Three-day weekends. Enough said.</li></ul><p>What You’ll Own</p><p>Your center of gravity will be <strong>security and compliance</strong>, particularly within a government contracting environment.</p><p>You’ll:</p><ul><li>Drive readiness and ongoing compliance for <strong>CMMC Level 2 and NIST SP 800-171</strong>.</li><li>Support <strong>SOC 2 and PCI DSS</strong> initiatives, including control design, evidence collection, remediation, and audit coordination.</li><li>Take security and infrastructure projects from idea to implementation, managing timelines, stakeholders, vendors, risks, and deliverables.</li><li>Administer and improve security technologies across endpoint protection, IAM, SIEM, MFA, email security, vulnerability management, and logging.</li><li>Lead access reviews, security awareness efforts, phishing simulations, and incident-response tabletop exercises.</li><li>Develop the policies, procedures, and security plans required for compliance, then make sure those controls actually work in the real world.</li><li>Partner with leadership on security risk, vendor reviews, customer requirements, and business decisions.</li><li>Roll up your sleeves alongside the IT team on <strong>Microsoft 365, Entra ID, servers, networking, endpoints, identity, and other infrastructure initiatives</strong>.</li></ul><p><br></p>