Director of Information Security

Civix

Director of Information Security responsible for Civix's security program across cloud infrastructure and SaaS products. Lead and mentor a team while ensuring compliance and risk management.

Posted 6/26/2026full-timeRemote • 🇺🇸 United StatesLeadWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Securitycloud-native SaaSAWSapplication securityenterprise complianceSOC 2FedRAMPvulnerability managementsecure software developmentincident response

Soft Skills

leadershipexecutive communicationmentoringstrategic directiongovernanceoperational executionbalancing security and business objectivescustomer focus

Industry Keywords

information security programsecurity policiessecurity standardssecurity proceduressecurity awarenesssecurity operationscustomer security assessmentsaudits

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Responsible for leading Civix's enterprise information security program across corporate systems, cloud infrastructure, SaaS products, and customer-facing security initiatives.
Partner closely with Engineering, Product Management, Cloud Operations, Compliance, Customer Success, and Executive Leadership to ensure security is embedded throughout the software development lifecycle.
Own the strategic direction, governance, and operational execution of the company's security program, including compliance initiatives, security operations, product security, security awareness, and incident response.
Lead a team of security professionals while serving as the primary security advisor for customers, auditors, vendors, and executive leadership.
Develop and execute the company's enterprise information security strategy. Establish security policies, standards, procedures, and governance practices.
Build and mentor a high-performing Information Security team.

Requirements

What you’ll need

10+ years of progressive Information Security experience.
5+ years leading Information Security teams.
Experience securing cloud-native SaaS platforms (AWS preferred).
Strong understanding of modern application security practices.
Experience leading enterprise compliance programs including SOC 2.
Experience supporting or preparing organizations for FedRAMP or comparable government security frameworks.
Experience managing vulnerability management and remediation programs.
Knowledge of secure software development practices.
Experience responding to customer security assessments and audits.
Strong executive communication skills.
Demonstrated ability to balance security, business objectives, and customer needs.

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work arrangements
Professional development opportunities