Director of Security & Risk

Required

• 10+ years of experience in information security, including significant experience leading security governance, compliance, assurance, or risk management programs.
• Demonstrated experience owning major security compliance and assurance programs such as FedRAMP, SOC 2, PCI DSS, or comparable regulatory frameworks, including direct engagement with auditors, assessors, and external stakeholders.
• Strong technical understanding of modern cloud infrastructure, SaaS application security, identity and access management, vulnerability management, and security architecture. Ability to independently evaluate technical findings, control designs, and remediation approaches.
• Proven ability to build and improve security programs, independently identify control gaps and emerging requirements, establish priorities, and translate security risks into actionable organizational plans.
• Experience managing and developing security professionals, establishing high standards for quality and accountability, and leading programs across distributed teams.
• Experience with third-party risk assessments, customer security diligence, and security risk management, including the ability to evaluate complex technical and contractual security requirements.
• Strong written and verbal communication skills, sound judgment, and the ability to influence engineering teams, business leaders, auditors, and external stakeholders without relying solely on formal authority.