Director of Information Security

Job Summary

To lead and maintain the company's information security program, the full-time salaried Director of Information Security will manage security operations, incident response, and vulnerability management while working remotely with a focus on protecting systems and customer data.

Key responsibilities

• Manage security monitoring, vulnerability scanning, and security assessments across the company's systems and applications
• Own ongoing continuous monitoring and maintenance of the System Security Plan, ensuring effective technical controls
• Coordinate the investigation and resolution of security incidents while maintaining incident response procedures

Required qualifications

• 5+ years of experience in information security, including security operations and risk management
• Experience with FedRAMP, NIST 800-53, and security documentation
• Strong technical understanding of cloud security, preferably AWS, and web application security
• Experience with vulnerability management and incident response
• Ability to collaborate effectively with engineering teams to mitigate security risks