Director of Information Security

Job Summary

Leading the development of a comprehensive information security and compliance strategy, the full-time remote Senior Director of Information Security and Compliance will oversee the maturity of the security program, manage key teams, and serve as the executive voice during security incidents while ensuring compliance with international regulations.

Key responsibilities

• Drive the maturity of Foundant's information security and GRC program, setting strategic roadmaps to protect client trust
• Lead and develop teams focused on technical security and governance, risk, and compliance, fostering a security-first culture
• Communicate effectively during security incidents with clients, leadership, and regulators, while managing third-party risk assessments

Required qualifications

• 8+ years of leadership experience in information security and/or governance, risk, and compliance (GRC)
• Experience building or maturing security and compliance programs for multi-product SaaS companies
• Familiarity with international regulatory frameworks such as GDPR, SOC 2, and ISO 27001
• Proven track record in leading security incident response programs
• CISSP, CISM, or CRISC certification preferred; equivalent professional experience accepted