Ready to make an impact? Join 1855 Partners.
Director, IT Security
We are seeking a strategic yet hands-on Director of IT Security to lead and scale our cybersecurity program. In this role, you will define our security posture, drive compliance initiatives, and protect our infrastructure against evolving threats. As a mid-size firm, we value a leader who can balance rigorous security standards with operational agility—someone who can present risk frameworks to the executive team in the morning and troubleshoot a complex cloud security architecture in the afternoon.
Duties and Responsibilities
Strategic Leadership: Develop, implement, and maintain a comprehensive enterprise information security strategy and roadmap aligned with business objectives.
Threat & Incident Management: Direct the continuous monitoring of our environments, leading the incident response team during critical events and conducting thorough post-mortem analyses.
Architecture & Engineering: Partner with IT and engineering teams to embed security best practices into the software development life cycle (SDLC), cloud infrastructure, and network architecture.
Compliance & Risk: Oversee the execution of security audits, vulnerability assessments, and penetration tests. Ensure continuous compliance with applicable frameworks (e.g., SOC 2, ISO 27001, GDPR, NIST).
Team Development: Recruit, mentor, and manage a lean, high-performing team of security engineers and analysts.
Security Culture: Champion security awareness across the organization, developing training programs that build a security-first mindset among all employees.
Must-Have Qualifications
Experience: 8+ years of progressive experience in Information Security, with at least 3 years managing and building security teams.
Technical Depth: Deep expertise in cloud security architecture (AWS, Azure, or GCP), modern endpoint protection, zero-trust network architectures, and identity and access management (IAM).
Framework Fluency: Practical experience implementing and auditing against major cybersecurity and privacy frameworks (NIST CSF, CIS Controls).
Communication: Exceptional ability to translate complex technical risks into clear business impacts for executive leadership and non-technical stakeholders.
Required Certifications
At least one premier security leadership certification: CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager).
Nice-to-Have Qualifications
Growth Experience: Proven track record of scaling security programs from the ground up at a mid-size or rapidly growing organization.
DevSecOps: Hands-on experience integrating automated security testing (SAST/DAST) into CI/CD pipelines.
Vendor Management: Experience negotiating and managing relationships with MSSPs and third-party security vendors.
Nice-to-Have Certifications
CCSP (Certified Cloud Security Professional)
CISA (Certified Information Systems Auditor)
Relevant GIAC certifications (e.g., GSLC, GCIH)
APPLICATION
Let's get to know you.
We'll try to autofill your name, email, phone, and LinkedIn from your resume — best-effort, so double check before submitting.