Director of Security & Compliance (Remote)

Wysh Financial, LLC.; Northern (KY); Hybrid; USD 190,000 - 220,000; Full time

Benefits offered by this job

100% Medical coverage

401k with 4% match

Unlimited PTO

Job summary

Wysh Financial, LLC. is seeking a Director of Security to lead our information security program and ensure regulatory compliance across SOC 2, NIST, and NAIC requirements. The role reports to the CISO and translates security strategy into day-to-day programs, controls, and incident responses.

This is a full-time, remote position based in the U.S. (EST/CST preferred) with a base salary of $190k–$220k. You will oversee security operations, vulnerability management, third-party risk, security

Qualifications

• 8+ years of information security with at least 3 years in leadership or program management.
• CISSP or CISM required; CEH/CCSP/CRISC preferred.
• Experience managing SOC 2 Type II programs and security compliance audits.
• Hands-on with SIEM platforms (Elastic or equivalent), vulnerability scanners, and EDR/XDR tools.
• Strong knowledge of NIST CSF, ISO 27001, and cloud security best practices.
• Experience with insurance cybersecurity requirements—NAIC Model #668 and state regulations preferred.
• Proven experience leading security incident response.

Responsibilities

• Lead information security operations: SIEM, threat detection, vulnerability scanning, pentesting, incident response.
• Own SOC 2 Type II compliance program with auditors and evidence remediation.
• Manage third-party/vendor risk management program and vendor security posture assessments.
• Refine security awareness and training for all employees, with modules for operations, engineering, and leadership.
• Oversee cloud security configurations, identity systems (SSO, PAM), and endpoints with IT teams.
• Maintain information security policies, standards, and procedures.
• Coordinate with CISO, CCO, and regulators on cybersecurity market conduct matters (NAIC).
• Lead incident response planning: tabletop exercises, breach readiness, cyber insurance coordination.
• Track and report security KPIs to CTO/CISO and executives.
• Evaluate emerging security tech and advocate investments to improve posture.

Skills

Leadership

CISSP/CISM

SOC 2 Type II

SIEM

Vulnerability scans

EDR/XDR

NIST/ISO 27001

Cloud security

NAIC compliance

Incident response

Tools

Elastic SIEM

EDR/XDR tools

Job description

Wysh Financial, LLC. is seeking a Director of Security to lead our information security program and ensure regulatory compliance across SOC 2, NIST, and NAIC requirements. The role reports to the CISO and translates security strategy into day-to-day programs, controls, and incident responses.

This is a full-time, remote position based in the U.S. (EST/CST preferred) with a base salary of $190k–$220k. You will oversee security operations, vulnerability management, third-party risk, security