Information Security Director

Job Summary

Leading the development and execution of the firm's information security program, the full-time remote Information Security Director will manage security controls, oversee compliance with regulatory requirements, and coordinate incident response activities.

Key responsibilities:

• Develop and maintain the firm's information security program, ensuring alignment with business objectives and regulatory expectations
• Lead risk assessments and security planning activities across the firm's infrastructure, applications, and cloud services
• Maintain the incident response plan and coordinate incident response activities, including communication and documentation

Required qualifications:

• 7+ years of progressive IT and security experience, with at least 3 years in information security
• Proven ability to plan and implement security controls independently
• Deep hands-on experience securing Microsoft 365 and Entra ID, including managing endpoints with Intune
• Practical experience with EDR, vulnerability scanning, and incident response coordination
• Strong knowledge of regulatory and compliance requirements for financial or professional services data