Apply on Employer Site

EverCommerce · 3 months ago

EverCommerce - Director, Security Architecture & Engineering (Remote, US)

United States

Full-time

Remote

Director/Executive

$200K/yr - $225K/yr

10+ years exp

EverCommerce is a leading service commerce platform that provides integrated SaaS solutions for service-based businesses. They are seeking a Director of Security Architecture & Engineering who will guide the design, implementation, and optimization of security solutions and processes within the company. This role involves leading the security architecture team, developing security requirements, and ensuring the integration of security controls into technology deployments.

Digital MediaFinancial ServicesSoftware

No H1B

Responsibilities

Create and maintain security architecture and engineering processes and procedures

Design of system architectures which meet established cybersecurity requirements and align with customer needs

This includes security requirements definition, documentation, and communication

Development of security architecture requirements and implementation guidance based on analysis of NIST 800-53 and or other security control frameworks

Architect, design, implement, maintain, and operates information system security controls and countermeasures

Provides techniques and patterns for securing integration with external security system vendors and/or cloud providers

Leads regular architecture and design reviews to ensure requirements implementation

Evaluates and plays an active role in life-cycle management of multiple security technologies

Identify security risks and control gaps within systems, designs, products, data flows, and processes; and recommend corrective architecture, integrations, controls, and operations

Lead the development of security requirements, architectures, and documentation to ensure security controls are seamlessly integrated into new technology deployments

Perform secure architecture and design reviews of new technology and security systems deployments, and collaborate with business teams to integrate secure-by-design principles into engineering projects and builds

Maintain a clear view of the overall security architecture roadmap and strategic plan

Leverage emerging technologies and advanced security practices to ensure EverCommerce is at the forefront of security for our solution groups and our customers

Build, maintain and mature security architecture metrics and reporting

Recruit, hire, train, coach and mentor security engineers and analysts

Additional duties as required and assigned

Qualification

Security ArchitectureCybersecurity FrameworksCloud Security AWSCloud Security AzureTechnical LeadershipSecurity CertificationsRisk Assessment MethodologiesCommunication SkillsTeam PlayerMentoring SkillsProblem-Solving Skills

Required

At least 10 years of relevant work experience in a technical field (e.g. cybersecurity, software development, or systems administration), with at least 10 years people leadership experience, and at least 5 years people leadership experience specifically in security

Bachelor's Degree in a technical discipline such as Cyber Security, Information Technology, Computer Science, or Information Systems - or equivalent professional experience

Have at least one current Industry recognized security certifications; CISSP, CISM, CISA, GIAC or commensurate experience

Excellent communication and interpersonal leadership skills, with the ability to communicate and collaborate effectively with cross-functional teams, matrixed organizations, and technical / and non-technical stakeholders

Detail Oriented team player with the desire and ability to mentor and onboard new engineers and team members

Demonstrated experience with the security, development and/or management of systems compliant to NIST 800-53, NIST CSF, or ISO 27001-2022 security control frameworks

Exceptional knowledge and understanding on the creation/implementation and securing of cloud technologies such AWS and Azure

Extensive ability to estimate, plan, lead and execute complex technical projects while working independently and/or in a team

Knowledge of Information Security risk assessment methodologies and standards

Highly flexible, self-motivated and eager to learn, with a strong passion for cyber security

Excellent verbal and written English communication skills