Director, Information Security (Security Engineering & Operations)

We are seeking a highly skilled and experienced Director Information Security for our Security Engineering and Operations team.  In this role you will be responsible for ensuring the security and integrity of our organizations systems networks and data. You will play a critical role in designing implementing and maintaining robust security infrastructure and overseeing day-to-day security operations.

Primary Responsibilities and Duties This role will be focused on these key functions

• Leadership and Team Management:

  • Develop and execute the companys information security strategy aligning it with business goals and objectives.

  • Establish and maintain relationships with internal stakeholders to foster a security-aware culture.

  • Provide executive-level guidance on security measures and initiatives ensuring they are integrated into the overall company strategy.

  • Manage the information security budget effectively allocating resources for key security projects and initiatives.

  • Foster a collaborative and high-performance culture within the team.

  • Set clear objectives and goals for the team members and ensure they are aligned with the overall security strategy.

  • Conduct regular performance evaluations provide constructive feedback and support professional development plans for team members.

  • Recruit and onboard new team members as needed.

  • Collaborate with Platform and Dev/Ops teams to ensure security best practises are being met

• Security Engineering Management:

  • Develop and execute a comprehensive security strategy including the design and implementation of security infrastructure policies and procedures.

  • Collaborate with cross-functional teams to assess security risks and requirements/configurations for new technologies systems and services.

  • Design and implement secure network architectures including firewalls intrusion detection systems data encryption and access controls.

  • Ensure the effective deployment and configuration of security tools and technologies to protect critical assets.

  • Oversee Application Security practices working closely with Engineering teams Dev/Ops and Platform teams.  

  • Familiarity with detection engineering functions.

• Security Operations Management:

  • Oversee the day-to-day security operations monitoring systems and responding to security incidents promptly.

  • Lead oversight of the detection engineering / management of alerting and detections.  

  • Implement and manage security incident response functions and procedures; including investigation containment and resolution of security breaches.

  • Create and maintain operational metrics.

  • Manage relationships with MssP and XDR providers.

  • Develop and maintain security incident response plans including coordination with internal stakeholders and external partners.

Qualifications :

Qualifications and Education Requirements:

• Proven experience ( 5 years) in managing security engineering and operations in a complex IT environment.   Bachelors degree in Computer Science Information Security or a related field is desirable.

• Strong knowledge of security principles practices frameworks and industry standards (e.g. ISO 27001 NIST CIS).

• Extensive experience in designing and implementing security infrastructure; including firewalls IDS/IPS SIEM endpoint protection etc.

• Familiarity with cloud security principles and technologies (e.g. AWS Azure GCP).

• Strong leadership and team management skills with the ability to inspire and motivate a diverse team.

• Strong communication and interpersonal skills with the ability to collaborate effectively with cross-functional teams.

• Relevant certifications (e.g. CISSP CISM GIAC) are highly desirable. 

Additional Information :

All your information will be kept confidential according to EEO guidelines.

Achieve well-being with:

• 401 (k) with employer match
• Medical dental and vision with HSA and FSA options  
• Competitive vacation and sick time off as well as dedicated volunteer days
• Access to wellness support through Employee Assistance Program physical and mental health wellness programs
• Pet care discounts for your furry family members
• Financial support in times of hardship with our Achieve Care Fund
• A safe place to connect and a commitment to diversity and inclusion through our six employee resource groups 

Join Achieve change the future.

At Achieve were changing millions of lives.
From the single parent trying to catch up on bills to the entrepreneur needing a loan for the next phase of growth youll get to be a part of their journey to a better financial future. Were proud to have over 3000 employees in mostly hybrid and 100% remote roles across the United States with hubs in Arizona California and Texas. We are strategically growing our teams with more remote work-from-home opportunities every day to better serve our members. A career at Achieve is more than a jobits a place where you can make a true impact have a sense of belonging establish a fulfilling career and put your well-being first.

Attention Agencies & Search Firms: We do not accept unsolicited candidate resumes or profiles. Please do not reach out to anyone within Achieve to market your services or candidates. All inquiries should be directed to Talent Acquisition only. We reserve the right to hire any candidates sent unsolicited and will not pay any fees without a contract signed by Achieves Talent Acquisition leader.

#LI-KM1

Remote Work :

No

Employment Type :

Full-time