Senior Director, Information Security

🕒 Setembro 1

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $225.000 - $275.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 17%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

EverCommerce

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 2016

🏥 Saúde

💼 Consultoria

📦 Logística

💰 Private Equity Round em 2019-07

Healthcare • Consulting • Logistics

A EverCommerce é a principal plataforma de comércio de serviços, fornecendo soluções SaaS integradas e personalizadas verticalmente para mais de 500. 000 empresas globais baseadas em serviços. Fundada em 2016, a EverCommerce oferece soluções de software que ajudam as empresas a promover seus serviços, otimizar as operações diárias e melhorar o engajamento dos clientes. A empresa se especializa em impulsionar a economia de serviços com transformação digital em vários setores, incluindo Serviços Residenciais e de Campo, Serviços de Saúde e Fitness & Bem-Estar. A tecnologia da EverCommerce visa acelerar o crescimento, melhorar as operações e aumentar a retenção para pequenas e médias empresas, transformando a maneira como elas interagem com os clientes por meio de aplicativos digitais e móveis modernos.

Descrição

• Report to the Chief Information Security Officer and mature a scalable, business-aligned security program • Partner with Platform Engineering to enforce security baselines, Terraform modules, and AWS Control Tower account isolation • Embed SAST, DAST, SCA, dependency analysis, and TruffleHog scanning into GitHub CI/CD pipelines • Establish signing, scanning, and approval pipelines for the Central Golden Container Registry • Mandate AWS Secrets Manager and Vault architectures with automated secret rotation • Direct modernization of the 24x7 Security Operations Center, SIEM telemetry, and SOAR automation • Leverage eBPF and OpenTelemetry telemetry to detect unauthorized access, anomalous queries, and lateral movement • Lead enterprise incident response, digital forensics, root cause analysis, and executive crisis communications • Direct red-team penetration testing, CTF exercises, and threat modeling across HIPAA, PCI, and proprietary SaaS platforms • Transition GRC to API-driven continuous control validation for SOX 404(b), HIPAA, PCI DSS, NIST CSF, EHNAC, and SEC requirements • Maintain an auditable, real-time enterprise Risk Register • Standardize vendor risk management and provide automated security assurance documentation for customer deals • Deploy and lead embedded Security Engineering spokes within Vertical Business Units • Establish security and cloud training guilds • Develop multi-year cybersecurity strategies and roadmaps; align investments with business priorities • Support mergers, acquisitions, and divestitures from a cybersecurity perspective • Drive AI and automation across security operations • Inspire teams, develop security leaders, build stakeholder relationships, communicate risk, and foster cross-business collaboration • Travel to Denver headquarters or other North American offices as needed

🎯 Requisitos

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline (or equivalent practical experience) • 12+ years of progressive leadership experience across multiple information security domains • 6+ years of direct people leadership experience leading multi-disciplinary teams in high-growth, public SaaS or enterprise technology companies • Hands-on engineering background in AWS cloud infrastructure, Infrastructure-as-Code (Terraform/CloudFormation), and container orchestration (ECS, EKS, Docker) • Experience building or modernizing SIEM/SOAR pipelines, automated detection engineering, and incident response operations • Experience designing and executing continuous compliance programs under SOX 404(b), HIPAA, PCI DSS, or SEC reporting frameworks • Ability to translate complex security risks into business metrics for C-suite executives and Board Audit Committees • Strong collaborative acumen and ability to lead through influence in a decentralized, multi-business-unit operating model • Strong knowledge of enterprise security architecture, security GRC programs, and cyber threat landscapes, attacker TTPs • Must be eligible to work without sponsorship • Preferred: security due diligence and post-merger integration experience • Preferred: experience with Information Asset Inventory systems, Elastic Cloud, Torq SOAR, CrowdStrike, EDR/MDR/XDR, Okta, Netskope, AWS Secrets Manager, PAM, TruffleHog, and Lumos AI • Preferred: CISSP, CISM, CISA, GMON, CCSP, AWS Certified Security Specialty, or similar credentials • Preferred: SaaS software development/product-team experience • Preferred: distributed and remote team experience

🏖️ Benefícios

• Flexibility to work where/how you want within your country of employment – in-office, remote, or hybrid • Day 1 access to a robust health and wellness benefits, including an annual wellness stipend • 401k with up to a 4% match and immediate vesting • Flexible and generous (FTO) time-off • Employee Stock Purchase Program • Variable component included in most US locations

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo