Director of Cybersecurity

Ebsco Subscription Services España SL; Birmingham (AL); On-site; USD 180,000 - 250,000; Full time

Job summary

Moultrie in Birmingham, AL is seeking a seasoned Director of Cybersecurity to lead and mature our security program across the business. This senior role protects our subscription products and customer data, secures software engineering and DevOps pipelines, and builds a scalable governance framework.

You will partner with Engineering, Product, Legal and Executive leadership to embed security as a core business capability, not merely a compliance checkbox, driving risk reduction and resilient

Qualifications

• 10+ years of progressive cybersecurity experience, with at least 3 years in leadership.
• Deep technical expertise in cloud security across AWS/Azure/GCP.
• Proven DevSecOps implementation and secure CI/CD pipelines.
• Hands-on security tooling knowledge: SIEM, EDR, SAST/DAST, CSPM.
• Strong governance and compliance background (NIST, ISO 27001, SOC 2) and PCI-DSS/GDPR/CCPA familiarity.
• Experience leading incident response and executive communication.
• Excellent written and verbal communication skills.

Responsibilities

• Own end-to-end security posture of subscription platform and cloud infrastructure.
• Define and enforce cloud security architecture and IAM controls.
• Lead vulnerability management, pen testing, and red team activities.
• Establish SOC capability for monitoring and incident response.
• Oversee data security and PCI-DSS/CCPA/GDPR compliance.
• Embed security in SDLC and DevSecOps practices.
• Lead governance, risk and third-party security assessments.
• Develop and enforce security policies and vendor risk management.

Skills

Cloud security

DevSecOps

Security governance

Incident response

Security architecture

Security communication

Tools

SIEM

EDR

SAST/DAST

CSPM

Secrets management

Job description

Select how often (in days) to receive an alert:

Headquartered in Birmingham, Alabama, Moultrie (www.moultrie.com ) is the leader in game feeders and cellular camera innovation, building products used by hunters, property owners, and others for real-time remote monitoring.

We take pride in developing deep user understanding, obsessing about the details, and going the extra mile to show our users we love them. Moultrie is customer-driven – hardware, software, marketing, and customer success teams collaborate to deliver a quality user experience.

We are guided by the following principles: Customer Obsession.; Excellence is the Standard.; Bias for Action.; Act Boldly.; Deliver Results.; Hire and Develop the Best.; Be Curious and Learn.; Win as a Team

Job Summary

We are looking for a seasoned Director of Cybersecurity to lead and mature our security program across the full breadth of our business. This is a senior leadership role responsible for protecting our subscription products and customer data, securing our software engineering and DevOps pipelines, and building a governance framework that scales with the company.

You will partner closely with Software Engineering, Product, Legal, and Executive leadership to make security an essential part of our business — not just a compliance checkbox.

Job Responsibilities

Subscription Business & Infrastructure Security

• Own the end-to-end security posture of the company’s subscription platform, including customerfacing applications, APIs, and underlying cloud infrastructure.
• Define and enforce security architecture standards for cloud environments (AWS, Azure, GCP), ensuring proper network segmentation, identity and access management (IAM), and data protection controls.
• Lead vulnerability management, penetration testing, and red team exercises to proactively identify and remediate risk across production systems.
• Establish and maintain a Security Operations Center (SOC) capability — whether in-house, managed, or hybrid — to ensure continuous monitoring, threat detection, and incident response readiness.
• Oversee data security controls to protect subscriber PII and payment information in compliance with applicable regulations (PCI-DSS, CCPA, GDPR, etc.).
• Define and rehearse incident response plans, leading the organization through security events from detection through post-mortem.

Software Development & DevSecOps

• Embed security throughout the software development lifecycle (SDLC), partnering with Engineering and Product to shift security left without slowing delivery velocity.
• Own the security of CI/CD build pipelines, including secrets management, pipeline integrity, dependency scanning, and supply chain security controls.
• Drive adoption of SAST, DAST, SCA, and container/image scanning tools across development teams.
• Define and maintain secure coding standards, conducting regular developer security training and threat modeling workshops.
• Establish controls to detect and prevent dependency confusion, code injection, and software supply chain attacks in build and deployment processes.
• Partner with platform and infrastructure engineering teams to ensure IaC (Terraform, Pulumi, etc.) follows security best practices and is reviewed prior to deployment.

Governance, Risk & Compliance

• Build and maintain a cybersecurity governance framework.
• Own the company’s risk register for cybersecurity, providing clear, quantified risk reporting to executive leadership and the board as appropriate.
• Lead and manage third-party security assessments, customer security questionnaires, and audit responses (SOC 2 Type II, penetration test reports, etc.).
• Develop and enforce security policies, standards, and procedures across the organization.
• Drive vendor and third-party risk management, ensuring security requirements are embedded in procurement and contract processes.
• Maintain awareness of the evolving regulatory landscape and ensure the company’s practices remain compliant with applicable laws and industry standards.
• Champion a culture of security awareness through company-wide training programs, phishing simulations, and ongoing communication.

Job Requirements

• 10+ years of progressive experience in cybersecurity, with at least three years in a leadership role managing security programs and teams.
• Deep technical expertise in cloud security (AWS, Azure, or GCP) and securing SaaS or subscription-based products.
• Proven experience implementing DevSecOps practices and securing CI/CD pipelines in modern engineering environments.
• Hands-on knowledge of security tooling: SIEM, EDR, SAST/DAST, vulnerability scanners, secrets management platforms, and cloud security posture management (CSPM) tools.
• Strong background in security governance frameworks (NIST CSF, ISO 27001, SOC 2) and working knowledge of compliance requirements (PCI-DSS, GDPR, CCPA).
• Experience leading incident response efforts, including communication with executives, legal, and external stakeholders.
• Excellent written and verbal communication skills — able to translate complex technical risk into clear, actionable business language.

Preferred Qualifications

• Relevant certifications: CISSP, CISM, CISA, AWS Security Specialty, or equivalent.
• Experience with software supply chain security frameworks (SLSA, SBOM generation, Sigstore, etc.).
• Familiarity with zero trust architecture and its practical application in enterprise environments.
• Experience working in a subscription or SaaS business where availability and customer trust are directly tied to revenue.
• Background scaling security programs at a growth-stage company.

We are an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, sex, pregnancy status, age, national origin or ancestry, ethnicity, religion, creed, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation, benefits, and termination of employment.

We comply with the Americans with Disabilities Act (ADA), as amended by the ADA Amendments Act, and all applicable state or local law.

Nearest Major Market: Birmingham
Job Segment: Test Engineer, Testing, Cloud, Embedded, Compliance, Engineering, Technology, Legal