Head of IT/Security

Department: Information Technology/Security

Employment Type: Full Time

Location: Remote - US

Description

• Develop and execute Rho's overall IT and Information Security strategy.
• Lead all corporate IT operations, including endpoint management, identity and access management, collaboration tools, and employee technology support.
• Build and mature Rho's cybersecurity program, including security policies, risk management, and incident response.
• Manage IT infrastructure, SaaS applications, cloud services, networking, and endpoint security.
• Oversee technology vendor selection, contract management, licensing, and budgeting.
• Ensure compliance with security frameworks, customer security requirements, and applicable regulatory standards.
• Develop business continuity, disaster recovery, and incident response plans.
• Partner with cross-functional leaders to improve operational efficiency through technology and automation.
• Establish scalable IT processes and documentation that support a growing organization.
• Build and mentor an internal IT function while managing external managed service providers (MSPs) and security partners as needed.
  
  

Key Responsibilities

• Develop and execute a multi-year IT roadmap aligned with Rho's business objectives.
• Maintain reliable, secure, and scalable IT infrastructure supporting a distributed workforce.
• Oversee administration of collaboration platforms, productivity tools, and enterprise SaaS applications (e.g., Google Workspace, Slack, HRIS, ERP, CRM).
• Manage employee onboarding and offboarding technology processes, ensuring timely provisioning and deprovisioning of equipment and system access.
• Standardize hardware lifecycle management, asset tracking, software licensing, and technology procurement.
• Develop IT policies, standards, and operating procedures that support consistency and scalability.
  
  

• Own Rho's overall cybersecurity strategy and continuously improve the company's security posture.
• Develop and maintain security policies covering identity management, endpoint protection, password management, acceptable use, data protection, and access controls.
• Implement security monitoring, vulnerability management, endpoint detection and response (EDR), multi-factor authentication (MFA), and security awareness initiatives.
• Lead incident response planning, investigation, and post-incident reviews.
• Conduct regular security risk assessments and recommend mitigation strategies.
• Partner with Legal and Compliance teams on customer security questionnaires, audits, and security certifications.
  
  

• Ensure technology controls support applicable privacy, regulatory, and contractual requirements.
• Lead vendor security reviews and third-party risk assessments.
• Maintain documentation supporting audits and customer due diligence requests.
• Develop disaster recovery and business continuity plans and coordinate periodic testing.
  
  

• Serve as a trusted technology advisor to senior leadership.
• Build strong relationships across every department to understand business needs and identify opportunities for automation and process improvement.
• Manage relationships with managed service providers, security vendors, hardware suppliers, and consultants.
• Establish service levels and performance metrics for IT support and operational excellence.
• Mentor and develop future IT team members as the function grows.
  
  

Qualifications and Experience

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent practical experience).
• 8+ years of progressive experience in IT, infrastructure, systems administration, cybersecurity, or technology operations.
• 3+ years of leadership experience managing IT teams, vendors, or managed service providers.
• Experience building or scaling IT operations within a high-growth company.
• Strong knowledge of cloud-based business applications, identity and access management, endpoint management, networking, and enterprise collaboration platforms.
• Experience implementing cybersecurity best practices, including MFA, endpoint security, vulnerability management, and incident response.
• Experience managing technology vendors, software licensing, procurement, and IT budgets.
• Strong understanding of security frameworks such as SOC 2, NIST Cybersecurity Framework, ISO 27001, CIS Controls, or similar standards.
• Excellent project management, communication, and stakeholder management skills.
• Ability to balance strategic planning with hands-on execution in a fast-paced environment.

• Experience supporting a remote or hybrid workforce.
• Experience in consumer packaged goods (CPG), health and wellness, nutraceutical, dietary supplement, manufacturing, or e-commerce industries.
• Experience supporting ERP, warehouse management, CRM, HRIS, and supply chain technologies.
• Familiarity with compliance requirements related to FDA-regulated businesses or consumer products.
• Experience leading SOC 2, ISO 27001, or similar security certification efforts.
• Professional certifications such as CISSP, CISM, Security+, CCSP, PMP, ITIL, or equivalent.
• Knowledge of automation tools and no-code/low-code platforms to improve workflows, reduce manual tasks, and enhance operational efficiency. 
• Demonstrated success building IT organizations from the ground up.

• Developed a clear IT and information security roadmap aligned with Rho's strategic priorities.
• Strengthened Rho's cybersecurity posture by implementing scalable security controls and reducing organizational risk.
• Established reliable IT support processes that deliver a consistently excellent employee experience.
• Improved identity and access management through standardized onboarding, offboarding, and role-based access controls.
• Built strong partnerships across departments and become a trusted advisor on technology decisions.
• Increased operational efficiency through thoughtful technology improvements and automation.
• Developed disaster recovery, incident response, and business continuity plans that are regularly tested and maintained.
• Improved visibility into technology assets, licensing, vendor performance, and IT spending.
• Successfully managed external vendors while establishing the foundation for a scalable internal IT organization.
• Created an IT environment that is secure, reliable, scalable, and capable of supporting Rho's continued growth.
  
  

Why Join Rho Nutrition