Director, Information Security and Technology
This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Director, Information Security and Technology in the United States.
This leadership role is an exciting opportunity to drive the security and IT strategy for a rapidly growing SaaS organization. The Director of Information Security and Technology will oversee enterprise-wide security programs while managing IT operations, networks, cloud infrastructure, and end-user devices. You will define security frameworks, embed security into the software development lifecycle, and champion risk management, all while ensuring scalable and efficient IT operations. This position requires collaboration with Engineering, Product, and business teams to align technology initiatives with organizational objectives. You will also guide the secure and responsible adoption of AI and emerging technologies, balancing innovation with risk mitigation, in a fast-paced, global environment.
Accountabilities:
- Lead enterprise information security programs, including governance, policies, risk management, compliance, and incident response.
- Embed security into the software development lifecycle and DevSecOps practices to ensure secure product delivery.
- Manage IT operations including networks, servers, cloud environments, and end-user devices, ensuring reliability and scalability.
- Oversee global IT support, asset lifecycle management, and service level agreements to maintain operational efficiency.
- Drive security awareness, training programs, and foster a culture of security across the organization.
- Partner with third-party vendors and manage security assessments, ensuring appropriate controls are implemented.
- Provide regular reporting on security posture, incidents, and risk metrics to executive leadership.
- Guide secure and responsible adoption of AI and emerging technologies, ensuring innovation aligns with risk management practices.
Requirements:
- Bachelor’s degree in Information Security, Computer Science, IT, or related field; Master’s degree preferred.
- 8–10+ years in information security roles, including 3+ years in a leadership capacity.
- Strong knowledge of cybersecurity frameworks (ISO 27001, SOC 2) and familiarity with NIST CSF or equivalent.
- Proven experience implementing security policies, standards, and procedures in SaaS or software-driven environments.
- Hands-on experience with application security, secure SDLC, cloud security, and DevSecOps practices.
- Demonstrated ability to manage incident response, vulnerability management, and third-party security risk.
- Excellent communication and stakeholder management skills, with the ability to convey complex security concepts clearly.
- Integrity, sound judgment, and the ability to handle confidential information appropriately.
- Preferred certifications: CISSP, CISM, CISA. Experience in global SaaS organizations, AI security, and regulatory compliance is a plus.
Benefits:
- Competitive total compensation including base salary and bonus eligibility.
- Comprehensive medical, dental, and vision insurance.
- Paid time off, sick leave, and parental leave.
- 401(k) retirement plan and Health Savings Account options.
- Life insurance and Employee Assistance Program.
- Opportunity to work on cutting-edge technology in a global SaaS environment.
- Professional development, training opportunities, and exposure to emerging technologies.
