IT Security

About FTC Solar Inc

FTC Solar is a fast growing, global provider of solar tracker systems, technology, software, and engineering services. We are as passionate about renewable energy as we are about our culture and values. We want to attract likeminded individuals who live and breathe Integrity, Accountability, Innovation and Excellence. We're humble enough to know that we don't know everything, so we love bold ideas that disrupt the status quo. Basically, we don't want you to just fall in line

FTC Solar is committed to creating a culture of inclusion and diversity. For us, this is not just a set of words or metrics. It drives our culture, creativity, and future success. We support our employees and foster an environment where new ideas and perspectives are celebrated and encouraged. When our employees thrive, FTC Solar thrives. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

About the Role:

The IT Security & Compliance Engineer will play a critical role in safeguarding the organization's information assets by designing, implementing, and maintaining robust security measures. This position is responsible for ensuring that all IT systems comply with relevant regulatory requirements and internal policies, thereby minimizing risk and protecting sensitive data. The engineer will collaborate closely with cross-functional teams to identify vulnerabilities, conduct risk assessments, and develop mitigation strategies. Additionally, they will lead efforts to monitor security incidents, respond to threats, and continuously improve the security posture of the organization. Ultimately, this role ensures that the company's IT infrastructure remains secure, resilient, and compliant with industry standards.

Minimum Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• At least 3 years of experience in IT security, compliance, or a related role.
• Strong understanding of security frameworks and standards such as ISO 27001, NIST, GDPR, and PCI-DSS.
• Experience with security tools such as firewalls, intrusion detection/prevention systems, vulnerability scanners, and SIEM solutions.
• Knowledge of network protocols, operating systems, and cloud security principles.

Preferred Qualifications:

• Professional certifications such as CISSP, CISM, CISA, or CEH.
• Experience working in a regulated industry such as finance, healthcare, or telecommunications.
• Familiarity with cloud platforms like AWS, Azure, or Google Cloud and their security best practices.
• Hands-on experience with automation and scripting for security operations (e.g., Python, PowerShell).
• Strong communication skills with the ability to explain complex security concepts to non-technical stakeholders.

Responsibilities:

• Develop, implement, and maintain IT security policies, procedures, and controls to ensure compliance with regulatory standards such as GDPR, ISO 27001, and others relevant to the industry.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate security weaknesses.
• Monitor security alerts and incidents, perform root cause analysis, and coordinate incident response activities to mitigate potential threats.
• Collaborate with IT, legal, and business teams to ensure security requirements are integrated into projects and operational processes.
• Maintain documentation related to security controls, compliance audits, and risk management activities to support internal and external audits.

Skills:

The IT Security & Compliance Engineer will utilize their technical skills daily to configure and manage security infrastructure, ensuring continuous protection against cyber threats. Analytical skills are essential for conducting thorough risk assessments and interpreting security data to identify vulnerabilities. Communication skills are critical when collaborating with various teams and reporting compliance status to management. Knowledge of regulatory requirements guides the development and enforcement of policies that align with legal and industry standards. Additionally, problem-solving skills enable the engineer to respond effectively to security incidents and implement improvements that enhance the organization's overall security posture.

WORKING CONDITIONS

FTC Solar offers competitive wages, growth opportunities, and a comprehensive benefits package.