Director of DevOps, Security & IT

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of and enhance jrni’s production cloud infrastructure on AWS and GCP for scalability, reliability, performance, and cost-effectiveness.

• Collaborate with Engineering/SRE on CI/CD, release management, and maintaining production stability.

• Spearhead infrastructure-as-code and automation initiatives to optimize workflows and eliminate repetitive tasks.

• Manage monitoring, alerting, and observability frameworks.

• Develop and test disaster recovery and business continuity strategies.

• Oversee vulnerability management, patching, and system hardening procedures.

• Set the strategic direction for the Information Security program in alignment with ISO 27001 and SOC 2 standards.

• Ensure operational controls are in place to meet ISO 27001, SOC 2, GDPR, and other regulatory frameworks.

• Manage AI security policies and governance standards in accordance with NIST AI RMF and ISO 42001.

• Lead AI Operations and oversee AI systems regarding privacy and security risks.

• Handle security and operational incident responses, including tabletop exercises, incident command, post-incident reviews, and remediation tracking.

• Coordinate breach notifications with Legal and the Data Protection Officer (DPO).

• Maintain the risk register and lead enterprise risk evaluations.

• Manage third-party/vendor risk assessments.

• Collaborate with Legal and external auditors for audits, evidence gathering, and certification renewals.

• Cultivate a culture of security awareness, data protection, and compliance, including training programs.

• Supervise Identity and Access Management (IAM) across corporate and production environments, including access reviews and joiner/mover/leaver processes.

• Oversee corporate IT functions, endpoint management, and SaaS administration.

• Enhance processes for improved productivity, scalability, and audit readiness.

• Develop and manage the operational budget.

• Handle cyber insurance relationships and renewals.

• Collaborate with Customer Success on service delivery and operational excellence.

• Build, mentor, and retain high-performing DevOps, security, and IT teams.

• Define career paths, performance objectives, and development plans for team members.

• Promote a blameless and learning-oriented workplace culture.

• Manage on-call duty rotations.

• Collaborate across Sales, Customer Success, Product, and Engineering teams.

• Manage customer security questionnaires, RFPs, and audit requests; maintain a customer-facing trust center.

• Act as a security executive sponsor during enterprise sales processes.

• Collaborate with Legal and Product teams on data residency, classification, retention/deletion, and Data Subject Access Request (DSAR) fulfillment.

• Establish and report on Key Performance Indicators (KPIs) to executives and the Board.

⛳️ Requirements

• Extensive experience in leading DevOps, platform, or infrastructure engineering for production SaaS at scale, including managing multiple teams.

• Demonstrated experience operating production SaaS infrastructure at scale on AWS and GCP.

• Proficient in infrastructure-as-code, CI/CD, automation, cloud security, network security, application security, and DevSecOps practices.

• Familiarity with Site Reliability Engineering (SRE) practices, monitoring, observability, reliability, and production incident response.

• Proven experience leading SOC 2 Type II and ISO 27001 audits from start to finish.

• Hands-on expertise with SIEM, Endpoint Detection and Response (EDR), vulnerability scanning tools, and Cloud Security Posture Management (CSPM) platforms.

• Experience managing corporate IT and identity solutions, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), SCIM, and endpoint management.

• Strong executive communication skills with Boards, customers, and auditors.

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent professional experience.

• Certifications such as AWS Solutions Architect/DevOps Engineer, Terraform Associate, CKA/CKAD, CISSP, CISM, CISA, AWS Security Specialty, or ISO 27001 Lead Auditor/Implementer are advantageous.

• Experience with Kubernetes and containerized workloads is a plus.

• Background in scaling platform, infrastructure, or InfoSec in a rapidly growing B2B SaaS company is preferred.

• Familiarity with HIPAA, PCI-DSS, or FedRAMP standards is desirable.

• Knowledge of AI/ML governance and securing AI-enabled products is a plus.

• Experience in defining and operating customer-facing trust programs is a plus.

• Must be legally authorized to work in the country of application, without current or future sponsorship.

🏝️ Benefits

• Fully remote work arrangement (US).

• Flexibility to work from anywhere within the country.

• Direct access to the CTO and meaningful decision-making opportunities from day one.

• Role scope expands with the company's growth.

• Equal opportunity employer.

• Adjustments or accommodations available throughout the application or interview process.