Director of Information Security

📋 Description

• Develop and lead the company-wide information security strategy aligned to business goals.
• Establish and manage the risk management program with quarterly reporting.
• Own SOC 2 Type 2, NIST 800-171, and other required audits end-to-end.
• Serve as primary point of contact for auditors and ensure audit readiness.
• Partner with Engineering to secure architecture, SDLC, and cloud security.
• Oversee vulnerability management, access controls, and vendor risk management.

🎯 Requirements

• 8+ years of experience in information security, risk, or compliance
• 3+ years leading security programs and external audits (SOC 2, NIST, ISO)
• Strong knowledge of cloud security, risk management frameworks, IAM, and SDLC
• Proven experience as primary audit owner interfacing with auditors
• Excellent written and verbal communication, including executive-level reporting
• Bachelor’s degree in Information Security, CS, Cybersecurity, or related field

🎁 Benefits

• Competitive compensation packages that recognize your expertise and contributions
• Remote-first culture that provides flexibility and balance
• Professional development opportunities, including training and mentorship
• Comprehensive health, dental, and vision insurance starting day one
• Short- and long-term disability and basic life insurance at no cost to you
• 401(k) plan with a 4% match