Apply on Employer Site

Tillster · 2 weeks ago

Head of Enterprise IT and Cybersecurity Compliance

San Diego, CA

Full-time

Hybrid

Director/Executive

$220K/yr - $290K/yr

10+ years exp

Tillster is seeking a senior leader to own their global Enterprise IT, Cybersecurity, and Compliance functions. This role will protect the organization’s systems and data while ensuring compliance with global privacy and security standards, guiding the company's cloud-first transformation and modernizing internal IT operations.

E-CommerceEnterprise SoftwareMobile Payments

No H1B

Responsibilities

Build and execute a comprehensive security, compliance, and enterprise IT strategy aligned with company objectives

Advise executive leadership on risk posture, emerging threats, and regulatory requirements

Oversee IT governance, asset management, endpoint strategy, identity management, and security-by-design standards

Lead corporate IT operations including helpdesk, SaaS management, access controls, device lifecycle, and employee support

Modernize the IT environment with automation, standardization, and cloud-first systems

Establish policies for acceptable use, asset management, remote workforce security, and incident reporting

Oversee onboarding/offboarding processes, MDM, SSO, and IAM across the entire organization

Own our global cybersecurity program covering cloud security, application security, network security, vulnerability management, and SOC operations

Architect and enforce zero-trust principles across users, services, and systems

Lead threat detection, incident response, forensics, and ongoing readiness exercises

Implement and manage security tools (SIEM, EDR, CSPM, WAF, IAM, DLP, etc.)

Maintain ongoing compliance with PCI DSS, GDPR, CCPA, SOC 2, ISO 27001, and future regulatory frameworks

Serve as primary owner of audits, certifications, and external assessments

Lead enterprise-wide risk management, vendor reviews, data protection controls, and privacy governance

Maintain audit readiness and drive continuous improvement of the ISMS

Partner with Engineering, DevOps, Product, Legal, and Operations to embed security into architecture, SDLC, and infrastructure

Lead, mentor, and grow a team of IT, security, and compliance professionals

Build a company-wide culture of security awareness and accountability

Qualification

Cybersecurity leadershipEnterprise IT strategyCompliance managementCloud-native securityIncident responseVulnerability managementRisk managementIdentity managementSecurity awarenessAudit readinessData protectionLeadershipCollaborationCommunicationTeam mentoring