Director of Security

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Finalsite

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1998

📚 Education

☁️ SaaS

🤝 B2B

💰 Debt financing on 2014-12

Education • SaaS • B2B

Finalsite is a provider of web and communications technology for K–12 and higher education institutions. Finalsite offers an education-focused CMS and website design (Composer), AI chatbot tools, mass notifications and messaging, mobile apps, enrollment and admissions management, and marketing services aimed at helping schools build community, improve communications, and grow enrollment. The company serves school districts, independent schools, international schools, charter schools, and faith-based schools and notes it has been trusted by schools for more than 25 years.

📋 Description

• Lead the security team, including hiring, development, performance reviews, promotions, and compensation recommendations • Build and run the security roadmap with the CISO • Lead execution of SOC 2 Type 2 attestation, including scope, control assessment, remediation, observation period, and evidence collection • Own Vanta and maintain the Customer Trust Portal and external-facing security documentation • Lead customer security questionnaires and external assessments • Establish and run security evaluations of third-party vendors • Build controls into engineering workflows and track control coverage • Draft and maintain security policies and standards for CISO approval • Prepare decisions for the CISO and drive follow-through • Lead security incident response and coordinate with SRE, support, legal, and customer-facing teams • Run vulnerability management across applications, infrastructure, and dependencies • Establish secure design practices, threat modeling, and security reviews • Partner on access control, authentication, secrets management, logging, and monitoring • Assess security and privacy implications of new capabilities, including AI-enabled features • Train engineers and the wider company on security practices • Report security risk and progress to leadership • Manage the security budget and make tooling and build, buy, or partner recommendations

🎯 Requirements

• Eight or more years in information security, including three or more leading a security team • Hands-on technical credibility across application security and cloud infrastructure • Direct experience taking an organization through a SOC 2 Type 2 audit, or a comparable attestation such as ISO 27001 • Experience leading customer security reviews and third-party vendor risk assessments at a software company • Experience leading response to real security incidents • Experience partnering with a CISO or another executive who owns security risk decisions • Experience working with engineering teams as a partner • Clear, honest communication about risk with technical and non-technical audiences • Experience hiring and developing security professionals • Comfort working with colleagues across several countries and time zones • Permanent residency in the United States; current and continued U.S. residency required • Preferred: experience with Vanta, Drata, or Secureframe and a customer-facing trust center • Preferred: leading a company through its first SOC 2 Type 2 attestation • Preferred: security leadership at a SaaS company with multiple products or a history of acquisitions • Preferred: PCI DSS experience • Preferred: student or children's data privacy, including FERPA and COPPA • Preferred: securing software across more than one cloud provider • Preferred: identity and access security, including SSO and MFA rollouts • Preferred: building a security program with a small team • Preferred: assessing AI-enabled product security and privacy risks • Preferred: K-12 or public-sector customer experience

🏖️ Benefits

• Competitive benefits • Professional development opportunities • 100% fully remote employment opportunities for permanent residents of the United States