Director, Information Security (Security Engineering & Operations)

Achieve; Arizona; On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

401(k) with employer match

Medical, dental, and vision with HSA and FSA options

Competitive vacation and sick time

Access to wellness support

Pet care discounts

Achieve Care Fund financial support

Job summary

Achieve is seeking a Director of Information Security to ensure the security and integrity of systems, networks, and data. The role involves developing security strategies, managing teams, and overseeing daily operations in a dynamic environment.

The ideal candidate has over 5 years of experience in security management, relevant certifications, and strong leadership skills. Benefits include 401(k), medical coverage, and wellness support.

Qualifications

• Over 5 years of experience managing security engineering and operations.
• Strong knowledge of security frameworks like ISO 27001 and NIST.
• Experience with cloud security and related technologies.

Responsibilities

• Develop and execute the information security strategy.
• Manage the information security budget.
• Oversee day-to-day security operations and incident response.

Skills

Management of security engineering and operations

Knowledge of security principles and frameworks

Strong leadership skills

Communication and interpersonal skills

Education

Bachelor's degree in Computer Science or Information Security

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Cloud security solutions

Job description

Achieve is a leading digital personal finance company that helps everyday people move from struggling to thriving with innovative financial solutions.

Role Overview

Director, Information Security – You will be responsible for ensuring the security and integrity of our organization's systems, networks, and data. You will design, implement, and maintain robust security infrastructure and oversee day‑to‑day security operations.

Responsibilities

• Leadership and Team Management:
  • Develop and execute the company's information security strategy, aligning it with business goals and objectives.
  • Establish and maintain relationships with internal stakeholders to foster a security‑aware culture.
  • Provide executive‑level guidance on security measures and initiatives, ensuring they are integrated into the overall company strategy.
  • Manage the information security budget effectively, allocating resources for key security projects and initiatives.
  • Foster a collaborative and high‑performance culture within the team.
  • Set clear objectives and goals for the team members and ensure they are aligned with the overall security strategy.
  • Conduct regular performance evaluations, provide constructive feedback, and support professional development plans for team members.
  • Recruit and onboard new team members as needed.
  • Collaborate with Platform and Dev/Ops teams to ensure security best practices are being met.
• Security Engineering Management:
  • Develop and execute a comprehensive security strategy, including the design and implementation of security infrastructure, policies, and procedures.
  • Collaborate with cross‑functional teams to assess security risks and requirements/configurations for new technologies, systems, and services.
  • Design and implement secure network architectures, including firewalls, intrusion detection systems, data encryption, and access controls.
  • Ensure the effective deployment and configuration of security tools and technologies to protect critical assets.
  • Oversee application security practices working closely with engineering teams, Dev/Ops and platform teams.
  • Familiarity with detection engineering functions.
• Security Operations Management:
  • Oversee the day‑to‑day security operations, monitoring systems, and responding to security incidents promptly.
  • Lead oversight of the detection engineering and management of alerting and detections.
  • Implement and manage security incident response functions and procedures; including investigation, containment, and resolution of security breaches.
  • Create and maintain operational metrics.
  • Manage relationships with MSSP and XDR providers.
  • Develop and maintain security incident response plans, including coordination with internal stakeholders and external partners.

Qualifications

• Proven experience (+5 years) in managing security engineering and operations in a complex IT environment. Bachelor's degree in Computer Science, Information Security, or a related field is desirable.
• Strong knowledge of security principles, practices, frameworks, and industry standards (e.g., ISO 27001, NIST, CIS).
• Extensive experience in designing and implementing security infrastructure; including firewalls, IDS/IPS, SIEM, endpoint protection, etc.
• Familiarity with cloud security principles and technologies (e.g., AWS, Azure, GCP).
• Strong leadership and team management skills, with the ability to inspire and motivate a diverse team.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross‑functional teams.
• Relevant certifications (e.g., CISSP, CISM, GIAC) are highly desirable.

Benefits

• 401(k) with employer match
• Medical, dental, and vision with HSA and FSA options
• Competitive vacation and sick time off, as well as dedicated volunteer days
• Access to wellness support through Employee Assistance Program, physical and mental health wellness programs
• Pet care discounts for your furry family members
• Financial support in times of hardship with our Achieve Care Fund
• A safe place to connect and a commitment to diversity and inclusion through our six employee resource groups

All information will be kept confidential according to EEO guidelines.