Director of Security

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Director, Security based in the United States.

• Define and execute the organization's security strategy across cloud security, application security, security operations, and governance, risk, and compliance (GRC)
• Lead initiatives to achieve and maintain certifications and frameworks such as SOC 2, ISO 27001, and HIPAA
• Recruit, mentor, and develop security managers and senior individual contributors
• Integrate security into the software development lifecycle through threat modeling, architecture reviews, secure development practices, and automated vulnerability scanning
• Strengthen monitoring, logging, alerting, and incident response capabilities
• Represent security at the executive level in strategic customer discussions, support security due diligence, and oversee third-party vendor risk assessments
• Expand security automation by integrating testing, policy enforcement, and security controls into CI/CD pipelines and deployment workflows
• Provide architectural oversight across GPU clusters, network boundaries, identity and access management, backend services, and cloud infrastructure, applying zero-trust principles
• Partner with Infrastructure and Site Reliability Engineering teams to coordinate secure provisioning, network isolation, operational resilience, and infrastructure dependencies
• Establish and monitor security metrics, including patching service-level agreements, defect escape rates, and remediation progress

• At least 7 years of experience leading security teams, including managers and/or multiple squads
• At least 8 years of experience building and securing SaaS, cloud platforms, or infrastructure products, with deep knowledge of cloud-native architectures, Kubernetes, Linux security, networking, and virtualization
• Proven ability to take complex security initiatives from concept through execution while balancing risk, scope, timelines, and business priorities
• Experience building team culture, accountability, and execution momentum in a remote-first or distributed working environment
• Strong understanding of operational security metrics, incident response, vulnerability management, and continuous improvement of security practices
• Excellent written and verbal communication skills, with the ability to translate complex technical risks into clear business recommendations for executives and cross-functional teams