Separation of InfoSec and IT Operations responsibilities

I’ve recently joined an organization as the ISO and the only Cybersecurity focused individual among the other 40+ IT staff members. My past 12+ years of IT have been as a generalist with a focus on infrastructure and security for a variety of industries and organizations at an MSP. As I was doing discovery, assessing the environment for risk, gaining access to systems, etc. I found numerous misconfigurations in areas like e-mail security (both O365 and Spam filter), AD auditing, …

cybersecurity infosec operations responsibilities