Director of Security
Posted Updated 9
views
Description
- We are seeking an experienced and forward-thinking security leader to own our enterprise information security program and oversee the protection of our data, systems, and infrastructure
- This leader will set strategy, manage risk, and ensure compliance with applicable regulations while partnering with business and technology teams. The role also includes oversight of IT operations and support where required
- Develop and execute a comprehensive, enterprise-wide information security strategy aligned to business goals
- Establish and maintain policies, standards, and controls for data protection, network security, endpoint security, cloud security, and incident response
- Lead and mentor a high-performing security team and collaborate with engineering, IT, legal, HR, and other functions
- Conduct ongoing risk assessments, vulnerability management, and penetration testing; tabletop exercises to evaluate readiness for real-world attack scenarios; present findings to senior leadership and the board
- Drive compliance with US and international frameworks and regulations (SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, etc.)
- Manage security aspects of third-party/vendor relationships
- Act as primary contact for regulators, auditors, and key customers on security matters
- Serve as an executive spokesperson for security and privacy issues internally and externally
Benefits
- Unlimited PTO
- Healthcare Packages
- Global Wellness Days
- Employee Assistance Programs
- Parental Leave
- Fertility Assistance
- Hands-on knowledge of security architectures for cloud and hybrid environments
- Demonstrated success building and leading enterprise security programs in a US or global organization
- Professional certifications such as CISSP, CISM, CCISO, CISA or equivalent preferred
- 12+ years of progressive experience in information security, with at least 5+ years in a senior leadership role
- Excellent leadership, communication, and stakeholder-management skills, including board-level reporting
- Strong understanding of US regulatory environment and industry standards
- Familiarity with IT operations (networks, infrastructure, support) and ability to oversee these areas