[Hiring] Senior Director, Security & Compliance @PepperJam

Role Overview: 

Join our global Information Security & Compliance team at Company, where we enable business initiatives, manage security & compliance risks, and deliver operational services worldwide. As Senior Director of Information Security & Compliance, reporting to the Chief Operating Officer, you will define and implement best practice information security policies and standards aligned with ISO 27001 principles. You'll manage governance, risk, and compliance across functions, ensuring alignment with business goals and regulatory requirements. This role will collaborate closely with Technology and Legal teams to advise on cyber risk and compliance, integrating security roadmaps and risk reduction initiatives across the organization.

Responsibilities:

• Act as a trusted cybersecurity partner, advising stakeholders on security risk, strategy, and policy.
• Present and champion cybersecurity programs and initiatives to stakeholders.
• Support stakeholders in managing cyber risk and compliance programs, policies, and metrics.
• Define cybersecurity strategies and controls to securely enable operations and services.
• Lead the Cyber audit function and communicate findings effectively to the Executive Leadership Team.
• Collaborate with Technology teams to implement effective security solutions and controls.
• Manage security incidents, ensuring proactive management and mitigation of risks.
• Directly manage a small team, ensuring effective service delivery across the business.

Requirements:

• 7-10 years of experience in Cybersecurity, Technology Risk Management, or related fields.
• Experience in SaaS Technology for Financial Services preferred.
• Strong leadership skills with experience in team management and performance.
• Excellent communication skills, capable of engaging with stakeholders at all levels.
• Knowledge of cybersecurity compliance standards such as ISO, SOC, NIST, CMMC.
• Experience in a matrix organizational model, supporting operational and transformational efforts.
• Familiarity with endpoint, networking, hosting, and cloud security technologies.
• Experience with GRC tools (risk management, security controls monitoring) preferred.
• Relevant industry certifications (ISACA CISM, CRISC or similar) 

US Benefits & Perks

• Flexible Time Off Policy – Take the time you need
• Enhanced Parental Leave: 16 weeks for birth parent, 8 weeks for non-birth parent at full pay after one year employment
• Robust Company Sponsored Health & Welfare Benefits
• 401k Plan – 4% employee match
• Enhanced Wellness Program including access to EAP, Wellness Coaching & Wellness Fridays program
• Regular company events and activities