Director of Information Security

📋 Description

• Own and continuously mature the information security program in alignment with ISO 27001 and SOC 2
• Develop, formalize, maintain, and operationalize security policies, standards, and procedures
• Manage the internal control environment, including risk assessments, control testing, audit
• Build and maintain effective relationships with external auditors, penetration testers, and
• Own security across infrastructure, networks, AWS/GCP cloud environments, endpoints, and
• Define the strategy and roadmap for identity and access management, cloud and network security

🎯 Requirements

• Bachelor’s degree in Information Security, Computer Science, Computer Engineering, or a related
• 10+ years of experience in information security, including at least 3 years in a leadership role
• Direct operational experience with ISO 27001 and SOC 2, with a strong understanding of what
• Strong technical expertise in cloud security, particularly AWS and/or GCP.
• Strong understanding of network security and modern application security practices.
• Experience with secure SDLC, application security tooling, and security practices across

🎁 Benefits

• Competitive compensation aligned with experience and qualifications.
• Remote opportunity within the United States.
• Opportunity to lead and shape a growing information security function.
• Strategic and hands-on ownership across governance, cloud security, application security
• Direct partnership with Engineering, Product, IT, Legal, and executive leadership.
• Opportunity to influence security strategy and risk decisions at the organizational level.