Senior Director, Information Security

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $225 000 - $275 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 12%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

EverCommerce

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2016

🏥 Santé

💼 Conseil

📦 Logistique

💰 Private Equity Round en 2019-07

Healthcare • Consulting • Logistics

EverCommerce est la plateforme de commerce de services de premier plan, offrant des solutions SaaS intégrées, adaptées verticalement, à plus de 500 000 entreprises de services à l'échelle mondiale. Fondée en 2016, EverCommerce propose des solutions logicielles qui aident les entreprises à promouvoir leurs services, à rationaliser leurs opérations quotidiennes et à améliorer l'engagement client. La société se spécialise dans l'accélération de l'économie des services grâce à la transformation numérique dans plusieurs secteurs, notamment les services à domicile et sur le terrain, les services de santé, ainsi que le fitness et le bien-être. La technologie d'EverCommerce vise à accélérer la croissance, améliorer les opérations et augmenter la fidélisation pour les petites et moyennes entreprises, transformant la manière dont elles interagissent avec leurs clients grâce à des applications modernes numériques et mobiles.

Description

• Report to the Chief Information Security Officer and mature a scalable, business-aligned security program • Partner with Platform Engineering to enforce security baselines, Terraform modules, and AWS Control Tower account isolation • Embed SAST, DAST, SCA, dependency analysis, and TruffleHog scanning into GitHub CI/CD pipelines • Establish signing, scanning, and approval pipelines for the Central Golden Container Registry • Mandate AWS Secrets Manager and Vault architectures with automated secret rotation • Direct modernization of the 24x7 Security Operations Center, SIEM telemetry, and SOAR automation • Leverage eBPF and OpenTelemetry telemetry to detect unauthorized access, anomalous queries, and lateral movement • Lead enterprise incident response, digital forensics, root cause analysis, and executive crisis communications • Direct red-team penetration testing, CTF exercises, and threat modeling across HIPAA, PCI, and proprietary SaaS platforms • Transition GRC to API-driven continuous control validation for SOX 404(b), HIPAA, PCI DSS, NIST CSF, EHNAC, and SEC requirements • Maintain an auditable, real-time enterprise Risk Register • Standardize vendor risk management and provide automated security assurance documentation for customer deals • Deploy and lead embedded Security Engineering spokes within Vertical Business Units • Establish security and cloud training guilds • Develop multi-year cybersecurity strategies and roadmaps; align investments with business priorities • Support mergers, acquisitions, and divestitures from a cybersecurity perspective • Drive AI and automation across security operations • Inspire teams, develop security leaders, build stakeholder relationships, communicate risk, and foster cross-business collaboration • Travel to Denver headquarters or other North American offices as needed

🎯 Exigences

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline (or equivalent practical experience) • 12+ years of progressive leadership experience across multiple information security domains • 6+ years of direct people leadership experience leading multi-disciplinary teams in high-growth, public SaaS or enterprise technology companies • Hands-on engineering background in AWS cloud infrastructure, Infrastructure-as-Code (Terraform/CloudFormation), and container orchestration (ECS, EKS, Docker) • Experience building or modernizing SIEM/SOAR pipelines, automated detection engineering, and incident response operations • Experience designing and executing continuous compliance programs under SOX 404(b), HIPAA, PCI DSS, or SEC reporting frameworks • Ability to translate complex security risks into business metrics for C-suite executives and Board Audit Committees • Strong collaborative acumen and ability to lead through influence in a decentralized, multi-business-unit operating model • Strong knowledge of enterprise security architecture, security GRC programs, and cyber threat landscapes, attacker TTPs • Must be eligible to work without sponsorship • Preferred: security due diligence and post-merger integration experience • Preferred: experience with Information Asset Inventory systems, Elastic Cloud, Torq SOAR, CrowdStrike, EDR/MDR/XDR, Okta, Netskope, AWS Secrets Manager, PAM, TruffleHog, and Lumos AI • Preferred: CISSP, CISM, CISA, GMON, CCSP, AWS Certified Security Specialty, or similar credentials • Preferred: SaaS software development/product-team experience • Preferred: distributed and remote team experience

🏖️ Avantages

• Flexibility to work where/how you want within your country of employment – in-office, remote, or hybrid • Day 1 access to a robust health and wellness benefits, including an annual wellness stipend • 401k with up to a 4% match and immediate vesting • Flexible and generous (FTO) time-off • Employee Stock Purchase Program • Variable component included in most US locations