Director of Information Security, Cloud & Compliance Strategy

plume; United States; Remote; USD 180,000 - 280,000; Full time

Job summary

plume is hiring a Director of Information Security to elevate a certified program and secure cloud, network, and application layers without slowing product velocity. You will own the information security program, align with ISO 27001 and SOC 2, and drive the move to SOC 2 Type 2 while partnering with Engineering, Product, IT, Legal, and the executive team.

This role requires a hands-on leader with 10+ years in security, deep cloud security experience in AWS/GCP, and a track record building

Qualifications

• 10+ years in information security with at least 3 years leading a security program end to end.
• Hands-on operational experience living inside ISO 27001 and SOC 2 frameworks day to day, not only at audit time.
• Clear communication skills that flex between engineering whiteboards and board-level risk briefings.

Responsibilities

• Own and mature the information security program, keeping it aligned with ISO 27001 and SOC 2 and steering the transition to SOC 2 Type 2.
• Author, formalize, and maintain policies, standards, and procedures spanning risk management, access control, incident response, vendor risk, change management, and business continuity.
• Run the internal control environment end to end: risk assessments, control testing, audit evidence collection, and remediation tracking, while managing external auditors, penetration testers, and compliance partners.
• Set the strategy and roadmap for identity and access management, network and cloud security architecture, endpoint protection, vulnerability management, logging and monitoring, and incident response across AWS and GCP environments.
• Embed secure software delivery practices through threat modeling, secure code review, dependency and supply-chain security, and CI/CD pipeline hardening.
• Lead, coach, and develop the security team, defining roles, workflows, and an enablement-first culture; serve as the primary security voice to Engineering, Product, IT, Legal, and the executive team, and support customer-trust and sales-enablement efforts.

Skills

Security leadership

Cloud security (AWS/GCP)

ISO 27001 / SOC 2

Policy & governance

Audits & compliance management

Application security / SDLC

Container/Kubernetes security

Incident response & risk management

Executive communication

Education

Bachelor's degree in Information Security or related field

Job description

plume is hiring a Director of Information Security to elevate a certified program and secure cloud, network, and application layers without slowing product velocity. You will own the information security program, align with ISO 27001 and SOC 2, and drive the move to SOC 2 Type 2 while partnering with Engineering, Product, IT, Legal, and the executive team.

This role requires a hands-on leader with 10+ years in security, deep cloud security experience in AWS/GCP, and a track record building