Director of Information Security and IT

We're hiring a Director of Information Security and IT to own our information security function and IT operations end-to-end. This is a working leadership role that consolidates responsibilities historically split across multiple roles under a single accountable leader. You'll partner directly with the VP of Technology & Professional Services and the Corporate Leadership Team on our IT and security strategy.

What you'll own

• • Information security — strategy, governance, risk, compliance, and incident response across corporate IT, product infrastructure, and customer-facing solutions

• • IT operations — software portfolio, vendor relationships, contracted support, hardware lifecycle, business continuity, and disaster recovery

• • Our IT automation infrastructure (agents, skills, operational scripts) that keeps a lean team moving

• • The security relationship with our customers — questionnaires, audits, and escalations — and our representation to prospects, partners, and regulators

What we're looking for

• • 8+ years of progressive experience across information security and IT operations, with at least 3 years carrying significant security responsibilities

• • Hands-on technical depth in Linux server administration, scripting, and modern infrastructure tooling

• • Working knowledge of containerization (Docker, Kubernetes), virtualization, and cloud infrastructure security

• • Experience implementing and operating security frameworks such as SOC 2, ISO 27001, or NIST CSF, and managing external audits

• • Demonstrated experience leading incident response end-to-end

• • Familiarity with DevSecOps practices and with building or operating automated / agentic operational workflows

• • Strong communication skills across executive, customer, and regulator audiences

• • Bachelor's or higher in CS, Information Security, IT, Engineering, or equivalent experience CISSP, CISM, CCSP, OSCP, or equivalent certifications preferred

• Why this role

• You'll be the single accountable leader for security and IT at a company where you can shape the operating model, and serious enough that the work matters to customers, regulators, and the leadership team. We're looking for a player-coach who builds for automation first.