Director of IT and Security

We are looking for a strategic Director of IT & Security to lead the organization's technology infrastructure, cybersecurity, and enterprise security initiatives. This role will be responsible for establishing and scaling secure, resilient, and efficient systems that support business growth while ensuring strong governance, compliance, and operational excellence.

Working closely with executive leadership and cross-functional stakeholders, the Director of IT & Security will define and execute the company's technology and security strategy, balancing business enablement with risk management and long-term scalability.

Responsibilities

• Define and execute the company's IT and Information Security strategy, roadmap, and operational priorities.
• Lead the design, implementation, and management of enterprise IT infrastructure, including cloud environments, networks, endpoints, and business applications.
• Develop, implement, and maintain security policies, standards, and best practices across the organization.
• Oversee cybersecurity operations, including threat monitoring, vulnerability management, incident response, and risk mitigation initiatives.
• Ensure compliance with relevant regulatory and security frameworks, such as SOC 2, ISO 27001, GDPR, and other applicable standards.
• Manage identity and access management (IAM), endpoint protection, device management, and enterprise security controls.
• Establish and maintain disaster recovery, business continuity, and backup strategies to support organizational resilience.
• Partner with Engineering, Product, Finance, HR, and other business functions to drive secure architecture, data governance, and operational security practices.
• Manage relationships with external vendors, managed service providers, security partners, and auditors.
• Lead company-wide security awareness programs and foster a culture of security ownership.
• Build, mentor, and scale IT and Security teams to support organizational growth.
• Own IT and security budgeting, vendor selection, and cost optimization initiatives.

Requirements

• 8+ years of experience in Information Technology and/or Information Security roles, including at least 3 years in a leadership position.
• Strong hands-on expertise working with cloud platforms such as AWS, GCP, or Azure.
• Proven experience implementing and maintaining security and compliance frameworks, including SOC 2, ISO 27001, NIST, or similar standards.
• Deep understanding of network security, endpoint protection, identity and access management, and modern SaaS ecosystems.
• Experience leading audits, compliance programs, and risk management initiatives.
• Demonstrated ability to build scalable processes, systems, and teams from the ground up.
• Excellent stakeholder management skills and the ability to collaborate effectively across technical and business teams.
• Experience working in high-growth startups or global technology organizations is a strong advantage.