Director of IT Security
New
This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. ... For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia.Full-TimeDirector
SalaryThe annual base salary range for this position based in Canada is $150,000- $190,000 USD.
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years of experience in cybersecurity, information security or risk management. 3+ years leading enterprise security programs or security teams.
- Required Skills
- CybersecuritySalesforceRisk ManagementGoogle WorkspaceNetSuite
Requirements
- 7+ years of experience in cybersecurity, information security or risk management.
- 3+ years leading enterprise security programs or security teams.
- Demonstrated experience performing cybersecurity risk assessments and threat modeling.
- Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms.
- Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework.
- Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations.
- Experience working within fully remote organizations supporting distributed workforces.
- Strong executive communication skills.
- CISSP, CISM, CRISC, or equivalent cybersecurity certification strongly preferred.
Responsibilities
- Develop and execute the company's information security strategy and scalable security roadmap.
- Establish and maintain enterprise security policies, standards and governance frameworks.
- Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes.
- Lead vulnerability management efforts and prioritize remediation based on business risk.
- Manage device security policies using MDM software (Kandji).
- Own the organization's incident response program, including playbooks and tabletop exercises.
- Lead security compliance initiatives including SOC 2 Type II and future security certifications.
- Manage company-wide security awareness and phishing training programs.
View Full Description & ApplyYou'll be redirected to the employer's site
