Director of IT & Security

About the role

We are seeking a strategic Director of IT & Security to shape and execute our technology and cybersecurity roadmap. Reporting to executive leadership, you will ensure that our infrastructure, data, and applications are secure, resilient, and aligned with business growth.

Key responsibilities

• Define and implement the company’s IT and information security strategy, roadmap, and operational priorities.
• Design, deploy, and manage enterprise IT infrastructure, including cloud environments, networks, endpoints, and business applications.
• Develop, enforce, and maintain security policies, standards, and best practices across the organization.
• Oversee cybersecurity operations such as threat monitoring, vulnerability management, incident response, and risk mitigation.
• Ensure compliance with regulatory and security frameworks (e.g., SOC 2, ISO 27001, GDPR, NIST).
• Manage identity and access management, endpoint protection, device management, and other enterprise security controls.
• Establish disaster recovery, business continuity, and backup strategies.
• Collaborate with Engineering, Product, Finance, HR, and other functions to embed secure architecture and data governance.
• Lead vendor relationships, managed service providers, security partners, and auditors.
• Drive company‑wide security awareness programs and foster a culture of security ownership.
• Build, mentor, and scale IT and security teams while managing budgets and cost‑optimization initiatives.

Required profile

• 8+ years of experience in IT and/or information security, including at least 3 years in a leadership role.
• Proven track record of implementing and maintaining security and compliance frameworks.
• Deep understanding of network security, endpoint protection, identity and access management, and modern SaaS ecosystems.
• Experience leading audits, compliance programs, and risk management initiatives.
• Demonstrated ability to build scalable processes, systems, and teams from the ground up.
• Excellent stakeholder management and cross‑functional collaboration skills.
• Background in high‑growth startups or global technology organizations is a strong advantage.

Required skills

• AWS
• Google Cloud Platform (GCP)
• Microsoft Azure
• SOC 2
• ISO 27001
• NIST frameworks
• Network security
• Endpoint protection
• Identity and Access Management (IAM)
• Vulnerability management
• Incident response
• Disaster recovery and business continuity planning