Director, IT Security & Compliance
$175,000–$225,000 year
RemoteUnited States
Job Summary
Lead corporate IT, security operations, and compliance as the primary security advisor and trusted executive partner. Develop pragmatic security policies, manage external vendor and auditor relationships, and oversee identity, access, and employee technology lifecycles for a fully remote global workforce. Drive pending infrastructure decisions, including VPN strategy and tooling consolidation, while partnering with Engineering to remove technical blockers and improve CI/CD reliability. Identify and implement AI-enabled tools to eliminate manual processes and optimize cloud and SaaS spending. Establish governance for responsible AI usage and manage technology budgets across infrastructure and security tooling.
Required Qualifications
- Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience
- 10+ years of progressive experience in IT, infrastructure, security, cloud operations, or platform engineering roles
- 5+ years of leadership experience managing technology functions and cross-functional initiatives
- Demonstrated experience leading security and compliance programs (SOC 2 required), incident response activities, and risk management initiatives, with a pragmatic, risk-based approach
- Experience managing IT operations for distributed or remote-first organizations
- Experience managing technology budgets, vendor relationships, and cloud spend optimization
- Exceptional judgment and comfort with ambiguity: you make calls with incomplete information, handle conflict directly and non-emotionally, and get things done without needing follow-up
- Ability to balance strategic planning with hands-on technical execution
Desired Qualifications
- Experience in a SaaS, cloud management, cloud infrastructure, Kubernetes, or DevOps-focused organization
- Familiarity with AWS, Azure, Google Cloud, Kubernetes, Terraform, GitHub Actions, or similar technologies
- Experience with NIST 800-171, ISO 27001, FedRAMP, or other federal/public-sector compliance frameworks
- Security certifications such as CISSP, CISM, or equivalent; cloud certifications from AWS, Azure, or Google Cloud
- Experience implementing AI-driven productivity and operational automation solutions
- Experience working at a <100 employee company
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.