[Hiring] Director of Cyber Security @RapidFort, Inc.

Role Description

RapidFort Inc. is looking for a Director of Cyber Security to own our security posture and the risk position behind it — what our controls are, whether they work, what remains exposed, and who has accepted that exposure.

• This is a horizontal role by design. Cloud Operations, Infrastructure Engineering, and Corporate IT each own an estate and run it.
• You own the standard those estates are held to, the evidence that the standard is met, and the response when it is not.
• You will own the ISO 27001 ISMS and the SOC 2 Type 2 program end to end.
• Command security incidents with authority to direct containment across any estate.
• Give executive leadership and the Audit Committee an honest, current view of where our risk actually sits.
• Own two programs: FedRAMP authorization and CMMC Level 2.
• Security is also part of our commercial proposition; you will be the person customers’ security teams talk to.
• This role reports to the CIO but carries a standing reporting line to the Audit Committee.

Qualifications

• Experience in cybersecurity leadership roles.
• Strong understanding of ISO 27001, SOC 2, FedRAMP, and CMMC compliance frameworks.
• Proven ability to manage security incidents and lead cross-functional teams.
• Excellent communication skills for interacting with executive leadership and customers.

Requirements

• Own the information security policy set and the control framework.
• Own the technical standards the estate owners implement.
• Own the risk framework and the risk register.
• Own the exception process and approve risk acceptances below the material threshold.
• Own security architecture review for significant changes and new technology.
• Report the risk position to the CIO, executive leadership, and the Audit Committee.
• Own security monitoring across various environments.
• Act as incident commander for declared security incidents.
• Own post-incident review and drive remediation into the owning function’s backlog.
• Run tabletop and live exercises across technical teams and executive leadership.
• Own the vulnerability management program.
• Own the prioritization model for remediation efforts.
• Track SLA attainment by estate owner and report it.
• Own penetration testing and red team engagements.
• Own security testing requirements in the SDLC.
• Own the access governance model.
• Own privileged access policy.
• Own the design, scope, and cadence of access reviews.
• Own authentication and session policy.
• Own the ISO 27001 ISMS and SOC 2 Type 2 program.
• Close out FedRAMP authorization and CMMC Level 2.
• Own customer security assurance and the customer assurance pipeline.
• Own controlled distribution of audit artifacts under NDA.
• Own vendor and SaaS security assessment.
• Own the awareness program and role-specific training.

Benefits

• Base Salary: $200,000–$245,000 USD annually, depending on experience, qualifications, and location.
• Annual performance-based bonus.
• Equity: Stock options in RapidFort.
• Medical, dental, and vision insurance.
• 401(k) retirement plan.
• Paid time off and company holidays.
• Paid sick leave.
• Company-provided equipment.
• Professional development and growth opportunities.