Director of Security

Role Summary: 

We are seeking an experienced and forward-thinking security leader to own our enterprise information security program and oversee the protection of our data, systems, and infrastructure. This leader will set strategy, manage risk, and ensure compliance with applicable regulations while partnering with business and technology teams. The role also includes oversight of IT operations and support where required. 

Key Responsibilities 

• Develop and execute a comprehensive, enterprise-wide information security strategy aligned to business goals. 
• Establish and maintain policies, standards, and controls for data protection, network security, endpoint security, cloud security, and incident response. 
• Lead and mentor a high-performing security team and collaborate with engineering, IT, legal, HR, and other functions. 
• Conduct ongoing risk assessments, vulnerability management, and penetration testing; tabletop exercises to evaluate readiness for real-world attack scenarios; present findings to senior leadership and the board. 
• Drive compliance with US and international frameworks and regulations (SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, etc.). 
• Manage security aspects of third-party/vendor relationships. 
• Act as primary contact for regulators, auditors, and key customers on security matters. 
• Serve as an executive spokesperson for security and privacy issues internally and externally. 

Qualifications 

• 12+ years of progressive experience in information security, with at least 5+ years in a senior leadership role. 
• Demonstrated success building and leading enterprise security programs in a US or global organization. 
• Hands-on knowledge of security architectures for cloud and hybrid environments. 
• Familiarity with IT operations (networks, infrastructure, support) and ability to oversee these areas. 
• Strong understanding of US regulatory environment and industry standards. 
• Excellent leadership, communication, and stakeholder-management skills, including board-level reporting. 
• Professional certifications such as CISSP, CISM, CCISO, CISA or equivalent preferred. 

What We Offer 

• Opportunity to design and scale security and IT functions with executive visibility. 
• Competitive US-market compensation and benefits. 
• High-impact role shaping the security posture of a growing organization.