Director of Cyber Security (Fully Remote)

RapidFort, Inc.; United States; Remote; USD 200,000 - 245,000; Full time

Benefits offered by this job

Performance bonus

Equity

Medical/dental/vision

401(k)

PTO

Remote work

Job summary

RapidFort seeks a senior security leader to own the company’s security posture and risk. You will serve as the internal authority on standards and assurance, shaping information security policies and technical standards across the organization.

You will oversee monitoring, incident response, vulnerability management, and compliance with ISO 27001, SOC 2, FedRAMP, and CMMC. This is a remote role with periodic travel for audits and customer engagements.

Responsibilities

• Own the security posture and risk position across the entire company.
• Act as the internal authority on security standards and assurance.
• Develop and maintain information security policies and technical standards.
• Oversee security monitoring, incident response, and vulnerability management.
• Manage compliance programs for ISO 27001, SOC 2, FedRAMP, and CMMC.
• Lead customer security assurance and third-party risk assessments.

Job description

• Own the security posture and risk position across the entire company.
• Act as the internal authority on security standards and assurance.

Key Responsibilities:

• Develop and maintain information security policies and technical standards.
• Oversee security monitoring, incident response, and vulnerability management.
• Manage compliance programs for ISO 27001, SOC 2, FedRAMP, and CMMC.
• Lead customer security assurance and third-party risk assessments.
• Base salary range: $200,000-$245,000 USD.
• Includes performance bonus, equity, medical/dental/vision, 401(k), and PTO.
• Remote work with periodic travel for audits and customer engagements.

RapidFort

RapidFort is a cybersecurity company that helps organizations secure and optimize their software supply chain and containerized environments. As a fast-growing startup, we foster a culture of ownership and direct communication, where every team member contributes to our mission of securing cloud-native applications for regulated industries.