Directive Consulting

Director of IT Security (Remote US)

Remote - United States · Director

Work authorization required$150k-$190kDetected 21 days ago

SpringCybersecuritySOC OperationsIncident ResponseComplianceSalesforceSalesLeadershipCommunicationNetSuite

About the role

This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom.
As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats.
You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats.

Responsibilities

We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore.
Lead security compliance initiatives including SOC 2 Type II and future security certifications.
Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture.
Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance.
Maintain documentation for security policies, controls, audits, and evidence collection.
Develop and execute the company's information security strategy and scalable security roadmap.
We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack.
Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.

Requirements

In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary.
To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily.

Skills

Present cybersecurity risks, recommendations and security metrics to executive leadership.
Stay ahead of emerging cybersecurity threats, AI risks and industry best practices.
Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes.
Continuously evaluate new technologies and recommend security improvements.

Compensation

The annual base salary range for this position based in Canada is $150,000- $190,000 USD.
This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience.

Benefits

🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle
Benefits to Support the Whole Person:
🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace
🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave
🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time
This role has the opportunity to operate 100% virtually from your home office.

Company info

Build and/or manage company-wide security awareness and phishing training programs.
Promote a security-first culture across the organization.
Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices.
Establish security metrics and regularly report organizational security maturity.
7+ years of experience in cybersecurity, information security or risk management.
3+ years leading enterprise security programs or security teams.
Demonstrated experience performing cybersecurity risk assessments and threat modeling.
Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms.
Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework.
Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations.
Experience working within fully remote organizations supporting distributed workforces.
Strong executive communication skills with the ability to translate technical risk into business impact.
CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred.
Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture.
Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities.
Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation.
Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance.
Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement.
Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity.
Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption.
Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth.

Visa & Work Authorization

For global locations, you must have established and current work authorization and permanently reside in that country.

Apply directly at Directive Consulting →Create a free account for alerts like this View Directive Consulting immigration profile

This listing is sourced directly from Directive Consulting's careers page and normalized into a canonical job model.