Source Job

$200,000–$260,000/yr
US Unlimited PTO

  • Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
  • Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
  • Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.

Security Compliance Risk Management FedRAMP SOC 2 Cloud Security

20 jobs similar to Director of Security & Risk

Jobs ranked by similarity.

$150,000–$175,000/yr
US Unlimited PTO

  • Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
  • Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
  • Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.

symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.

$155,000–$170,000/yr
US Unlimited PTO

  • Own and drive the SOC 2 compliance program, including annual audits and certification.
  • Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
  • Lead customer security reviews and respond to complex security questionnaires.

Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.

US

  • Lead an enterprise-wide security and resilience program as the senior cybersecurity leader.
  • Build risk-based strategies, governance, and security architecture while enabling digital transformation.
  • Work fully remotely from the US with a competitive salary and comprehensive benefits.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. It operates remotely and uses an AI-driven process to review applications and share top candidates with employers.

$134,870–$197,809/yr
US

  • Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
  • Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
  • Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.

Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.

US

  • Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
  • Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
  • Prepare security compliance reports and execute Security Controls Test plans for ATO requests.

SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.

$144,000–$175,000/yr
US

  • Lead and mentor a growing GRC team, establishing priorities and developing compliance functions.
  • Oversee SOC 1, SOC 2, and HITRUST CSF compliance programs, audits, and control libraries.
  • Manage AI governance, privacy, third-party risk, and customer security assurance initiatives.

This partner company operates in healthcare technology, focusing on data protection and compliance. It is a high-growth remote-first organization with a small but growing GRC team, emphasizing practical controls and embedded security.

$175,000–$200,000/yr
US Canada

  • Lead compliance programs including SOC 2, GDPR, CCPA/CPRA, and Shopify partner security requirements.
  • Own security policies, risk management, business continuity, and incident response.
  • Manage IT operations, endpoint security, and cloud security across the company.

Rebuy revolutionizes shopping with intelligent, personalized experiences for DTC brands. They are a fully remote team with a culture rooted in ownership, drive, and empathy.

$188,000–$245,000/yr
Global Unlimited PTO

  • Lead Carrot's security strategy and roadmap, aligning corporate and product security with business priorities.
  • Own GRC, incident response, cloud and application security, and compliance certifications including SOC 2 and HITRUST.
  • Represent security posture to enterprise customers and partner with Engineering to embed secure practices across the platform.

Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.

$133,109–$239,596/yr
US 4w PTO

  • Partner with business leaders to translate priorities into practical security and risk decisions.
  • Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
  • Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.

US

  • Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
  • Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
  • Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.

Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.

Brazil

  • Conduct security architecture reviews and risk assessments for proposed IT solutions.
  • Evaluate designs to identify security risks, threats, and gaps in controls.
  • Act as a trusted security advisor to technical teams and leadership.

Kyndryl runs and reimagines mission-critical technology systems for the world's leading businesses. It has a global workforce and a culture focused on flexibility, support, and well-being.

United States Canada UK

  • Lead a high-impact engineering organization delivering secure, reliable, and scalable dedicated cloud infrastructure for enterprise and public sector customers.
  • Define strategy and roadmap for a premium single-tenant SaaS platform with demanding security, compliance, and availability requirements.
  • Oversee distributed engineering teams across platform orchestration, integrations, resilience, and regulatory compliance.

The company provides secure, reliable, and scalable dedicated cloud infrastructure for enterprise and public sector customers. It operates as a remote-first, AI-enabled engineering organization with a focus on innovation and operational excellence.

US

  • Lead technical federal compliance programs including CMMC, FedRAMP, and NIST 800-171 for government contractors.
  • Manage a small team of Security Analysts, driving performance through coaching, accountability, and high-quality outcomes.
  • Build and maintain client security programs, conduct gap/risk assessments, and manage external audits like CMMC and FedRAMP.

Founded in New York City in 2015, Rhymetec specializes in compliance, cybersecurity, and data privacy, helping clients build effective infosec programs. The company operates remotely across the United States and emphasizes professional development and a collaborative culture.

$216,000–$325,000/yr
US Unlimited PTO

  • Develop and implement enterprise security strategy, governance, and risk management across the organization.
  • Lead HIPAA compliance, AI security, and security operations, including incident response and customer trust.
  • Build a high-performing security team, embedding security-by-design across products, cloud, and infrastructure.

Insurity provides configurable, cloud-native insurance software that helps organizations capitalize on new opportunities. As the largest cloud-based software provider for the P&C market, it is trusted by 22 of the top 25 carriers and values innovation, teamwork, and continuous learning.

$157,000–$262,000/yr
US Unlimited PTO

  • Lead cloud architecture engagements from discovery through delivery for Azure, AWS, and Google Cloud.
  • Design secure landing zones, hybrid solutions, and compliance-aligned architecture for regulated clients.
  • Mentor a team of architects and engineers while supporting pre-sales and technical strategy.

Aprio is a Top 20 CPA and advisory firm that brings together proven expertise, deep understanding, and strategic foresight for fast-growing industries. With 40 U.S. offices and over 3,200 team members speaking 60+ languages, it offers a top-rated culture and vast growth opportunities.

$210,000–$265,000/yr
US Unlimited PTO

  • Own the enterprise-wide security strategy, protecting information assets across corporate and product environments.
  • Ensure compliance with federal and state regulations, while leading audits and improving disaster recovery programs.
  • Collaborate with leadership to embed operational rigor and security best practices across a transforming organization.

Pluralsight provides a learning platform dedicated to accelerating technology skills for today's tech workforce. The company is mission-driven and fosters a culture of inclusion, belonging, and continuous learning.

$180,000–$200,000/yr
US

  • Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
  • Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
  • Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.

Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.

US

  • Lead, mentor, and scale a high-performing global Solution Architecture team across multiple regions, covering pre-sales engineering and post-sales architecture work.
  • Define and execute solution strategy for Core Consulting and Managed Security Services portfolios, ensuring clear positioning and delivery confidence.
  • Partner with executive leadership and sales teams to win new business through compelling solution design and strong technical presentations.

Cyderes builds practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats with Managed Detection & Response (MDR). The company is Great Place to Work Certified and has a tireless global team that uses AI-driven platforms.

$125,000–$208,000/yr
Global

  • Manage information security risk assessments and evaluate security issues and controls.
  • Direct security tasks in business initiatives, including third-party vendor and GRC programs.
  • Support regulatory compliance (GLBA, PCI, SOX) and supervise a security team.

Pathward is a financial empowerment company that works with innovators to increase financial availability, choice, and opportunity for all. The company fosters an inclusive culture of problem solvers and innovators, embracing a HUMBLE*HUNGRY*SMART approach.

$120,500–$157,000/yr
US Unlimited PTO

  • Lead enterprise security awareness and human risk management strategy to reduce behavioral risk and strengthen security culture.
  • Design engaging campaigns, phishing simulations, and training programs that translate complex cybersecurity and compliance topics into clear, memorable experiences.
  • Partner with Security, GRC, Fraud, Privacy, Legal, HR, Marketing, and executive leadership to embed security expectations across the organization.

HealthEquity is a healthcare financial technology company on a mission to save and improve lives by empowering healthcare consumers with HSA and health savings solutions. The company values authenticity, innovation, and a culture focused on connecting health and wealth for American families.