Confidential · 21 hours ago
Director of Security
Confidential is a global technology organization serving the financial services sector, and they are seeking a Director of Information Security to lead regional execution of its security program across North America. This role blends hands-on security leadership with client-facing engagement and regulatory alignment, ensuring global security standards are operationalized locally while supporting customer assurance and compliance.
Marketing & Advertising
Responsibilities
Lead core security programs across North America, including identity and access management, vulnerability management, cloud security controls, and security architecture reviews
Drive implementation and evidence collection for security frameworks such as SOC 2 and ISO 27001
Oversee security tooling effectiveness and monitoring in collaboration with infrastructure and engineering teams
Translate global security standards into practical regional implementation
Serve as the primary security contact for North American customers, auditors, and prospects
Lead security discussions during RFPs, due diligence reviews, and customer assurance processes
Partner with sales and account teams to address client security requirements
Represent the organization’s security posture in technical and business forums
Manage regional risk assessments aligned to enterprise policies
Support regulatory compliance obligations applicable in North America
Contribute to audit readiness and remediation tracking
Support regional incident response coordination in alignment with global procedures
Participate in disaster recovery planning and security exercises
Qualification
Required
8–15 years of progressive experience in Information Security within software, fintech, or financial services environments
Experience in a hands-on security leadership role, such as Security Director or Lead
Strong knowledge of SOC 2, ISO 27001, NIST, and customer security review processes
Experience working directly with customers, auditors, or regulators on security matters
Technical background in cloud security (Azure or AWS), application security, and infrastructure security controls
Ability to communicate complex security topics clearly to both technical and business audiences
Bachelor's degree in Computer Science, Information Security, or a related field required
Preferred
Professional certifications such as CISSP, CISM, or CISA preferred
Advanced degree a plus