Director of Security

🕒 Outubro 16

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 12%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Finalsite

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 1998

📚 Educação

☁️ SaaS

🤝 B2B

💰 Debt financing em 2014-12

Education • SaaS • B2B

A Finalsite é um provedor de tecnologia web e de comunicação para instituições de educação básica e ensino superior. A Finalsite oferece um CMS e design de sites focados em educação (Composer), ferramentas de chatbot com IA, notificações em massa e mensagens, aplicativos móveis, gestão de matrículas e admissões, além de serviços de marketing voltados para ajudar escolas a construir comunidade, melhorar comunicações e aumentar matrículas. A empresa atende distritos escolares, escolas independentes, escolas internacionais, escolas charter e escolas religiosas, e afirma ser confiável pelas escolas há mais de 25 anos.

Descrição

• Lead the security team, including hiring, development, performance reviews, promotions, and compensation recommendations • Build and run the security roadmap with the CISO • Lead execution of SOC 2 Type 2 attestation, including scope, control assessment, remediation, observation period, and evidence collection • Own Vanta and maintain the Customer Trust Portal and external-facing security documentation • Lead customer security questionnaires and external assessments • Establish and run security evaluations of third-party vendors • Build controls into engineering workflows and track control coverage • Draft and maintain security policies and standards for CISO approval • Prepare decisions for the CISO and drive follow-through • Lead security incident response and coordinate with SRE, support, legal, and customer-facing teams • Run vulnerability management across applications, infrastructure, and dependencies • Establish secure design practices, threat modeling, and security reviews • Partner on access control, authentication, secrets management, logging, and monitoring • Assess security and privacy implications of new capabilities, including AI-enabled features • Train engineers and the wider company on security practices • Report security risk and progress to leadership • Manage the security budget and make tooling and build, buy, or partner recommendations

🎯 Requisitos

• Eight or more years in information security, including three or more leading a security team • Hands-on technical credibility across application security and cloud infrastructure • Direct experience taking an organization through a SOC 2 Type 2 audit, or a comparable attestation such as ISO 27001 • Experience leading customer security reviews and third-party vendor risk assessments at a software company • Experience leading response to real security incidents • Experience partnering with a CISO or another executive who owns security risk decisions • Experience working with engineering teams as a partner • Clear, honest communication about risk with technical and non-technical audiences • Experience hiring and developing security professionals • Comfort working with colleagues across several countries and time zones • Permanent residency in the United States; current and continued U.S. residency required • Preferred: experience with Vanta, Drata, or Secureframe and a customer-facing trust center • Preferred: leading a company through its first SOC 2 Type 2 attestation • Preferred: security leadership at a SaaS company with multiple products or a history of acquisitions • Preferred: PCI DSS experience • Preferred: student or children's data privacy, including FERPA and COPPA • Preferred: securing software across more than one cloud provider • Preferred: identity and access security, including SSO and MFA rollouts • Preferred: building a security program with a small team • Preferred: assessing AI-enabled product security and privacy risks • Preferred: K-12 or public-sector customer experience

🏖️ Benefícios

• Competitive benefits • Professional development opportunities • 100% fully remote employment opportunities for permanent residents of the United States

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo