Senior Director, Information Security

🕒 Setembro 2

⛰️ Colorado – Remoto

⛰️ Colorado – Remote

💵 $225.000 - $275.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 21%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

EverCommerce

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

☁️ SaaS

🤝 B2B

📣 Marketing

💰 Private equity em 2019-08

SaaS • B2B • Marketing

A EverCommerce é uma fornecedora de software personalizado para setores que impulsiona a economia de serviços. Ela desenvolve produtos SaaS para transformar digitalmente as operações diárias de profissionais de serviços, incluindo gestão de negócios, faturamento eletrônico e pagamentos móveis, marketing multicanal e ferramentas de engajamento do cliente. A EverCommerce foca em soluções verticalizadas – e não em software de mercado de massa – projetadas para modernizar as operações, o marketing e as interações com os clientes de empresas que prestam serviços.

Descrição

• Report to the Chief Information Security Officer • Mature a scalable, business-aligned security program supporting dozens of SaaS products across multiple vertical business units • Partner with Product Development, Legal, Compliance, the People Team, and senior leadership • Enforce security baselines, Terraform modules, and AWS Control Tower account isolation • Embed SAST, DAST, SCA, dependency analysis, and TruffleHog scanning into GitHub CI/CD pipelines • Establish signing, scanning, and approval pipelines for the Central Golden Container Registry • Mandate AWS Secrets Manager and Vault architectures with automated secret rotation • Direct modernization of the SOC, SIEM telemetry, and SOAR automation • Leverage eBPF and OpenTelemetry telemetry for infrastructure observability • Lead incident response, digital forensics, root cause analysis, and executive crisis communications • Direct red-team penetration testing, CTF exercises, and threat modeling across HIPAA, PCI, and proprietary SaaS platforms • Transition GRC to API-driven, continuous control validation • Maintain an auditable, real-time enterprise Risk Register • Standardize vendor risk management and provide automated security assurance documentation • Deploy and lead embedded Security Engineering spokes in Vertical Business Units • Establish security and cloud training guilds • Develop multi-year cybersecurity plans and roadmaps, align investments with business priorities, support M&A and divestitures, and drive AI and automation

🎯 Requisitos

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline (or equivalent practical experience) • 12+ years of progressive leadership with significant focus across multiple information security domains, including cloud security, software platform security, security strategy, architecture, engineering, controls, testing, vulnerability management, incident response, and cyber resiliency • 6+ years of direct people leadership experience leading multi-disciplinary teams in high-growth, public SaaS or enterprise technology companies • Hands-on engineering background in AWS cloud infrastructure, Infrastructure-as-Code (Terraform/CloudFormation), and container orchestration (ECS, EKS, Docker) • Experience building or modernizing SIEM/SOAR pipelines, automated detection engineering, and incident response operations • Experience designing and executing continuous compliance programs under SOX 404(b), HIPAA, PCI DSS, or SEC reporting frameworks • Ability to translate complex security risks into clear business metrics for C-suite executives and Board Audit Committees • Strong collaborative acumen to lead through influence in a decentralized, multi-business unit operating model • Strong knowledge of enterprise security architecture, security GRC programs, cyber threat landscapes, and attacker TTPs • Must be eligible to work without sponsorship • Preferred: security due diligence and post-merger integration experience; modern security tools; CISSP, CISM, CISA, GMON, CCSP, or AWS Certified Security Specialty; SaaS product-team experience; distributed and remote team experience

🏖️ Benefícios

• Flexibility to work where/how you want within your country of employment – in-office, remote, or hybrid • Day 1 access to a robust health and wellness benefits, including an annual wellness stipend • 401k with up to a 4% match and immediate vesting • Flexible and generous (FTO) time-off • Employee Stock Purchase Program

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo