Position Overview
The Director will build and lead security operational and engineering practices and support overall security program and product development. The position will build the processes and enhance the tools and processes to identify and contextualize threats across the company and its products, and work with partners to resolve security them. The director will build and maintain capabilities that enable meeting audit certifications and compliance requirements.
Key Responsibilities
- Support building governance and risk management functions, from policy, standards, guidelines to security assessments.
- Build and maintain tools, capabilities, processes that enable identification, filtering, and tracking of vulnerabilities and threats across the enterprise
- Oversee, develop, and continuously improve the application security that includes architecture, threat modeling pen testing, and remediation guidance
- Develop and maintain alerting and reporting mechanisms to potential cyber threats and oversee and augment and enterprise security operations
- Coordinate monitoring, threat hunting, investigation, containment, and other response activities with business stakeholders and technology groups
- Integrate threat detection and remediation capabilities into security operations to address emergent cyber threats to company products, services, data, and infrastructure
- Brief senior leadership on potential emergent threats and ongoing efforts to resolve active cyber security incidents and investigations
- Collaborate with stakeholders such as Crisis Management to support larger security initiatives, assessments, and resilience testing
- Advise product team on product research and provide input into development and enhancement of future capabilities
Required Skills
- 10+ years of work experience in leading threat detection, incident response, digital forensics, and vulnerability mitigation in an operations capacity
- Experience leading SOC 2 Type II audits and federal security certification processes and understanding of NIST Cybersecurity Framework, and security controls design
- Proven experience building, leading, and mentoring high-performing security teams
- Strong understanding of SaaS security, including compliance for cloud-based services
- Experience managing security operations, including incident response, threat detection, and vulnerability management
- Ability to communicate security concepts to non-technical audiences (C-suite, board, customers)
- Experience in responding to customer security questionnaires and managing audit
Preferred Skills
- Experience building or scaling a security program within a SaaS startup or high-growth technology company
- Experience developing security automation and orchestration workflows to improve operational efficiency
Qualifications
- Bachelor's degree in information systems, related field, or equivalent practical experience
- Relevant security certifications (CISSP, CISM, CEH, or similar) preferred
- Completion of a Background Check is required for employment at iCOUNTER
Behaviors/Values (Cultural Fit)
We have created a fantastic corporate culture - our values drive our behaviors. Here are the expectations:
- Passion for cybersecurity and a commitment to maintaining the highest standards of security.
- Eagerness to learn and stay current with evolving cybersecurity trends.
- Strong attention to detail and the ability to work under pressure.
- Ability to work collaboratively in a fast-paced, team-oriented environment.
- Integrity is paramount; honesty is a core value at iCOUNTER.
