Director of Cybersecurity & Compliance

Cybersecurity Jobs

Scottsdale (AZ)

Sur place

USD 120 000 - 160 000

Plein temps

14 jours+

Une candidature complète en une minute

Un CV et une lettre de motivation personnalisés, prêts à envoyer.

Passez les filtres ATS

Avantages offerts par ce poste

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with matching

Unlimited PTO

Parental leave

Wellness program

Friday lunch

Snacks

Relocation assistance

Résumé du poste

XpertDox in Scottsdale, AZ seeks a Director of Cybersecurity & Compliance to lead hands-on security and compliance operations onsite. You will own certification programs, controls, audit readiness, and evidence collection across cloud, on-premise, and remote environments.

The role requires 6+ years in cybersecurity/compliance, with strong IAM capabilities and experience in PHI environments. Relocation assistance and competitive base salary accompany the position.

Qualifications

Hands-on experience implementing SOC 2 Type 2 and ISO 27001 controls.
Experience collecting evidence and supporting third-party audits.
Strong IAM including RBAC, SSO, MFA and annual access reviews across cloud/hybrid.
Experience with PHI, healthcare, or PHI-related environments.

Responsabilités

Implement and maintain security and compliance controls for SOC 2 Type 2, ISO 27001, ISO 22301, HIPAA, and HITRUST.
Own evidence collection and preparation for third-party audits.
Manage enterprise client security questionnaires and trust documents.
Oversee RBAC/SSO/MFA and access reviews across cloud, on-premise, and remote access; ensure access governance for global delivery (India).
Run MFA and SSO operations.
Oversee application and web security, secure development practices, code/scanner checks, and secrets management.
Drive remediation of security findings with engineering teams.
Run vulnerability management across endpoints and cloud; manage remediation.
Coordinate penetration testing and track findings through remediation.

Connaissances

CISSP

CISM

CISA

GIAC

Security+

RBAC

SSO

MFA

GRC tooling

Outils

GRC tooling

Continuous monitoring

Description du poste

The Director of Cybersecurity & Compliance leads hands-on security and compliance operations for XpertDox, with responsibility for certification programs, control implementation, and audit readiness. This is an onsite role based in Scottsdale, Arizona.

Key Responsibilities

Implement and maintain security and compliance controls supporting SOC 2 Type 2, ISO 27001, ISO 22301, HIPAA, and HITRUST certification programs.
Own evidence collection and continuous control monitoring, including preparation for and execution of third-party audits.
Own enterprise client security questionnaires, maintain the answer library and trust documentation, and provide technical depth for client security reviews.
Own role-based access control and manage provisioning and deprovisioning, including periodic access reviews across cloud, on-premise, and remote access. Ensure access governance for the global delivery team in India.
Run multi-factor authentication (MFA) and single sign-on (SSO) operations.
Own application and web platform security, including secure development practices, code and dependency scanning, and secrets management.
Drive remediation of security findings with engineering teams.
Run vulnerability management and operate endpoint and cloud security controls.
Coordinate penetration testing and track findings through remediation.

Required Qualifications

Relevant certification such as CISSP, CISM, CISA, GIAC, or Security+.
Hands-on experience implementing and evidencing SOC 2 Type 2 and ISO 27001 controls, ideally using GRC or continuous-monitoring tooling.
6+ years in cybersecurity and compliance, including hands-on ownership of security operations or a compliance program.
Strong identity and access management experience, including RBAC, SSO, MFA, and periodic access reviews across cloud and hybrid environments.
Application and web security experience, including secure development practices, code and dependency scanning, and vulnerability remediation.
Experience in healthcare, health-tech, or another environment involving PHI.
Experience completing enterprise client security questionnaires and supporting audits.
Team leadership or senior individual-contributor experience.

Location and Work Schedule

This role is onsite at the Scottsdale, Arizona headquarters, Monday through Friday. The position is not remote or hybrid. You must relocate to the Scottsdale area before your start date. Travel is minimal.

Compensation and Incentives