Director Vulnerability Management Jobs in Riverside, CA

We're hiring a Director of IT, Infrastructure & Security to own Field AI's IT operations, corporate and cloud security, and compliance program end-to-end. You'll inherit a working program, SOC 2 Type II is in place, CMMC is being run in partnership with our MSP, and core IT systems are operational. Your charter is to keep it running well, mature it where it matters most, and serve as the senior voice on IT and security risk to the executive team.

This person must be highly comfortable operating in an environment where Google Workspace and Slack, Github and Jira are core IT and identity platforms, and where Linux/Ubuntu is the primary operating system across much of the company’s technical environment. We are looking for someone who has supported technical organizations where Linux-based systems are the norm, not an edge case.

This role is for someone who likes to operate close to the work. You will lead a small, capable IT team, manage our MSP relationships, and partner with Engineering, Legal, Sales, and Executive leadership to keep Field AI secure, compliant, and productive. Success here requires judgment, urgency, and practicality: knowing which controls matter, building cross‑functional alignment, and shipping durable solutions without depending on large teams, heavy process, or perfect conditions.

• IT Operations & Asset Lifecycle: Oversee day‑to‑day IT operations, including help desk, employee onboarding and offboarding, endpoint support, Google Workspace and JumpCloud administration, Linux/Ubuntu endpoint support, and service delivery across multiple sites. Ensure laptops, desktops, mobile devices, peripherals, software licenses, and related IT assets are procured, deployed, tracked, maintained, and retired through a disciplined asset lifecycle process.
• Oversee Network Infrastructure: Own the operation and lifecycle of Field AI’s physical and corporate network infrastructure, including switches, firewalls, routers, Wi‑Fi, VPNs, VLANs, network segmentation, secure remote access, cabling coordination, ISP/vendor management, monitoring, documentation, and refresh planning.
• Maintain Compliance and Audit Readiness: Maintain and improve Field AI’s existing compliance programs, including SOC 2 Type II, ISO 27001, and CMMC readiness/certification efforts. Own day‑to‑day compliance operations, including control monitoring, evidence collection, access reviews, asset records, policy maintenance, vendor coordination, and audit support.
• Own practical corporate security controls: including endpoint security, IAM, MFA, patching, vulnerability remediation, logging, EDR, SIEM/SOC coordination, vendor risk, incident coordination, and security awareness. Ensure security controls are effective, lightweight, and appropriate for a fast‑moving engineering company.
• Be the Senior Voice on Risk: Communicate risk in plain language to engineers, executives, and customers. Lead architectural review for security‑sensitive changes. Build buy‑in for the controls that matter and friction‑free paths for the ones that don’t.

• Enterprise IT and Infrastructure Leadership: 10+ years of experience in IT, infrastructure, corporate technology, identity, security operations, or related functions, including experience leading IT operations in a high‑growth technology company.
• Compliance Operationalization: Hands‑on experience driving SOC 2 Type II audits, with at least one of FedRAMP, ISO 27001, or CMMC also under your belt.
• CISSP or equivalent senior security certification/experience.
• Strong network infrastructure experience equivalent to CCNA‑level knowledge, including switches, firewalls, VLANs, routing, VPNs, Wi‑Fi, segmentation, and network troubleshooting.
• Cybersecurity and Security Operations Background: Strong working knowledge of corporate cybersecurity controls, including endpoint security, IAM, MFA, vulnerability management, patching, logging, EDR, SIEM/SOC coordination, vendor risk, incident response coordination, network security, and security awareness. You can evaluate security tooling, work with MSP/MSSP partners, identify meaningful risks, and make practical security decisions without overengineering the environment.
• Security Operations Tooling: Experience working with SIEM, EDR, vulnerability management, logging, and SOC/MSSP workflows. You can evaluate alerts, coordinate incident response, and work with internal and external partners to keep security operations effective.
• Automation and Systems Fluency: Comfort using scripting, APIs, workflow automation, or low‑code tools to improve onboarding, offboarding, access management, asset tracking, SaaS administration, reporting, and compliance evidence collection.

Our salary range is generous and we take into consideration an individual's background and experience in determining final salary; base pay offered may vary considerably depending on geographic location, job‑related knowledge, skills, and experience.

We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.