As a Director of
Product and Enterprise Security, you will lead the team responsible for securing our Enterprise, IAM, Cloud, Data, AI, and Products.
This role also includes broader enterprise security responsibilities, such as designing and maintaining our enterprise cyber architecture blueprints and encouraging adoption of security best practices across the organization.
The ideal candidate will be highly collaborative, balancing the right level of security with business objectives, and working to creatively solve complex problems.
Responsibilities:- Define and implement a unified and scalable security architecture plan aligned with NIST CSF 2.0, PCI, and NIST 800-53
- Standardize security controls across infrastructure, networks, and applications, ensuring compliance with regulatory and industry requirements.
- Oversee the design and security implementation of applications and cloud solutions
- Overseeing the implementation of AI tools in our products and environment.
- Drive Identity & Access Management (IAM) and Zero Trust Architecture across users, devices, and workloads.
- Advance Cloud Security & DevSecOps
- Establish security baselines and automated guardrails for cloud environments.
- Integrate security testing, vulnerability scanning, and compliance checks into CI/CD pipelines to enforce DevSecOps best practices.
- Drive container and API security to protect microservices-based applications.
- Drive security of Core Infrastructure & Data
- Enhance network segmentation, endpoint protection, and encryption strategies to minimize risk.
- Implement advanced threat intelligence and security monitoring across all security layers.
- Ensure strong data governance and protection for structured and unstructured data, including sensitive taxpayer and payment data.
- Provide strategic security guidance for new technology implementation and major product changes, assessing risks and integration challenges.
- Improve security awareness and training programs for IT, DevOps, and development teams.
Leadership responsibilities:
- Lead and mentor a team of Architects and Engineers across multiple security pillars, fostering a culture of collaboration and technical excellence.
- Work cross-functionally with IT, development, information security, and product leaders to align security strategy with business goals.
- Drive security governance policies and best practices that reduce risk while supporting innovation.
Required Qualifications- Bachelor's or Master's degree in Cybersecurity, Computer Science, or related field.
- 8+ years of experience in cybersecurity architecture, or engineering.
- Expertise in network security, cloud security (AWS, Azure, GCP), application security, IAM, and threat intelligence.
- Proficiency in infrastructure as code (e.g. Terraform, Ansicle)
- Experience conducting risk assessments, threat modeling, security architecture reviews, and regulatory compliance.
- Certifications preferred: CISSP, CISM, Vendor Cloud security architecture certifications
Preferred Qualifications- Experience working in a Fortune 500 or multinational enterprise.
- Strong understanding of DevSecOps, CI/CD security, and SDLC security integration.
- Familiarity with Zero Trust security models, emerging security technologies, and cloud security automation.
- Proven ability to balance security and business enablement, ensuring that security is embedded without slowing innovation.
- Awareness of AI tools for coding (Cursor, Claude Code, Codex)
