Director of Security – Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the primary security liaison for Anvilogic, guiding trust and security assessments throughout the sales and customer lifecycle.

• Manage security questionnaires, RFP security sections, and requests for audit support, ensuring timely and credible responses for enterprise security teams.

• Develop and enhance Anvilogic's internal security framework across cloud infrastructure, applications, corporate systems, and data, which includes vulnerability management, monitoring, and incident response.

• Ensure compliance with SOC 2 Type II and ISO 27001 by overseeing the control environment, coordinating audits, and maintaining continuous evidence collection.

• Lead and expand a small team focused on security engineering and compliance, while managing the security roadmap and priorities.

• Supervise IT operations, encompassing identity and access management, endpoint management, and SaaS administration, to strengthen the security posture.

⛳️ Requirements

• Over 10 years of experience in security or security engineering, with at least 3 years in a customer-facing or GRC role, including trust assessments, questionnaires, and audits.

• A minimum of 2 years of experience managing security engineers or a similarly technical team.

• Solid foundation in cloud security, preferably with AWS, covering infrastructure, identity and access management, and application security.

• Demonstrated ability to credibly represent a security posture to enterprise security teams, CISOs, and auditors, translating technical controls into clear assurances.

• Good judgment in prioritizing security initiatives based on actual risks in a fast-paced environment.

• Preferred: experience with a security vendor or in a company catering to enterprise security teams.

• Preferred: knowledge of security operations tools, such as SIEM, detection engineering, threat detection, and an understanding of contemporary SOC teams.

• Preferred: experience in managing or overseeing IT in a growing organization.

• Preferred: background in scaling a security program from an early or mid-stage.

🏝️ Benefits

• Competitive salary with equity in the company.

• Comprehensive medical, dental, and vision insurance.

• Unlimited paid time off policy to support work-life balance.

• 401(k) retirement plan with company matching.

• Monthly stipend for home internet and cell phone expenses.