Director of Security & Compliance (Remote)

Finalsite; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Remote work

Job summary

Finalsite is seeking a hands‑on security leader to drive its SOC 2 Type 2 attestation and mature the company’s security program. You will own the roadmap, manage the team, and coordinate with the CISO and distributed engineers across multiple countries.

The role focuses on compliance, customer trust, vendor risk, and secure software delivery. You will report to SRE and Security leadership and help ensure security practices are integrated into product and deployment workflows.

Qualifications

• Eight or more years in information security including leadership of a security team.

Responsibilities

• Lead the security team: set priorities, hire, develop, and manage engineers and analysts.
• Build and run the security roadmap, align priorities with the CISO, and plan work next to product and engineering.
• Lead execution of SOC 2 Type 2 attestation, define scope, assess controls, remediate, and coordinate with auditors.
• Own and manage Vanta for security documentation and customer trust materials.
• Oversee security questionnaires and external assessments with sales and customer success teams.
• Evaluate third‑party vendors for school and customer data, flag risks to the CISO.
• Integrate security controls into engineering workflows and maintain coverage visibility.
• Draft and maintain security policies and standards for CISO approval.
• Prepare decision materials for the CISO with options and recommendations.
• Lead security incident response with playbooks, incident lead, and post‑incident follow‑ups.
• Run vulnerability management across applications, infrastructure, and dependencies.
• Advise on secure design practices with threat modeling for new services.
• Partner with SRE, identity, and platform teams on access control and logging.

Skills

Security leadership

Threat modeling

Communication

Vendor risk

Incident response

Security program management

Education

Bachelor’s degree in a technical field

Tools

Vanta

Drata

Secureframe

Job description

Finalsite is seeking a hands‑on security leader to drive its SOC 2 Type 2 attestation and mature the company’s security program. You will own the roadmap, manage the team, and coordinate with the CISO and distributed engineers across multiple countries.

The role focuses on compliance, customer trust, vendor risk, and secure software delivery. You will report to SRE and Security leadership and help ensure security practices are integrated into product and deployment workflows.