Senior Director, Information Security

🕒 il y a 1 mois

⛰️ Colorado – Distant

⛰️ Colorado – Remote

💵 $225 000 - $275 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 13%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

EverCommerce

Site WebLinkedInTous les Emplois

1001 - 5000 employés

☁️ SaaS

🤝 B2B

📣 Marketing

💰 Private equity en 2019-08

SaaS • B2B • Marketing

EverCommerce est un fournisseur de logiciels adaptés à l'industrie qui alimente l'économie des services. Il développe des produits SaaS pour transformer numériquement les opérations quotidiennes des professionnels des services, y compris la gestion des affaires, la facturation électronique et les paiements mobiles, le marketing omni-canal et les outils d'engagement client. EverCommerce se concentre sur des solutions verticales, et non sur des logiciels de masse, conçues pour moderniser les opérations, le marketing et les interactions avec les clients pour les entreprises qui fournissent des services.

Description

• Report to the Chief Information Security Officer • Mature a scalable, business-aligned security program supporting dozens of SaaS products across multiple vertical business units • Partner with Product Development, Legal, Compliance, the People Team, and senior leadership • Enforce security baselines, Terraform modules, and AWS Control Tower account isolation • Embed SAST, DAST, SCA, dependency analysis, and TruffleHog scanning into GitHub CI/CD pipelines • Establish signing, scanning, and approval pipelines for the Central Golden Container Registry • Mandate AWS Secrets Manager and Vault architectures with automated secret rotation • Direct modernization of the SOC, SIEM telemetry, and SOAR automation • Leverage eBPF and OpenTelemetry telemetry for infrastructure observability • Lead incident response, digital forensics, root cause analysis, and executive crisis communications • Direct red-team penetration testing, CTF exercises, and threat modeling across HIPAA, PCI, and proprietary SaaS platforms • Transition GRC to API-driven, continuous control validation • Maintain an auditable, real-time enterprise Risk Register • Standardize vendor risk management and provide automated security assurance documentation • Deploy and lead embedded Security Engineering spokes in Vertical Business Units • Establish security and cloud training guilds • Develop multi-year cybersecurity plans and roadmaps, align investments with business priorities, support M&A and divestitures, and drive AI and automation

🎯 Exigences

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline (or equivalent practical experience) • 12+ years of progressive leadership with significant focus across multiple information security domains, including cloud security, software platform security, security strategy, architecture, engineering, controls, testing, vulnerability management, incident response, and cyber resiliency • 6+ years of direct people leadership experience leading multi-disciplinary teams in high-growth, public SaaS or enterprise technology companies • Hands-on engineering background in AWS cloud infrastructure, Infrastructure-as-Code (Terraform/CloudFormation), and container orchestration (ECS, EKS, Docker) • Experience building or modernizing SIEM/SOAR pipelines, automated detection engineering, and incident response operations • Experience designing and executing continuous compliance programs under SOX 404(b), HIPAA, PCI DSS, or SEC reporting frameworks • Ability to translate complex security risks into clear business metrics for C-suite executives and Board Audit Committees • Strong collaborative acumen to lead through influence in a decentralized, multi-business unit operating model • Strong knowledge of enterprise security architecture, security GRC programs, cyber threat landscapes, and attacker TTPs • Must be eligible to work without sponsorship • Preferred: security due diligence and post-merger integration experience; modern security tools; CISSP, CISM, CISA, GMON, CCSP, or AWS Certified Security Specialty; SaaS product-team experience; distributed and remote team experience

🏖️ Avantages

• Flexibility to work where/how you want within your country of employment – in-office, remote, or hybrid • Day 1 access to a robust health and wellness benefits, including an annual wellness stipend • 401k with up to a 4% match and immediate vesting • Flexible and generous (FTO) time-off • Employee Stock Purchase Program