Director, Security & Compliance — Remote

Wysh; United States; À distance; USD 190 000 - 220 000; Plein temps

Avantages offerts par ce poste

Remote work

Unlimited PTO

Paid Holidays

401k with match

Training allowance

Wellness reimbursement

Résumé du poste

Wysh is seeking a Director of Security to translate security strategy into day-to-day programs and controls. You will own vulnerability management, SOC 2 Type II compliance, and third-party risk for a national operations scope in the U.S., with a base salary in the reported range.

This remote, full-time role requires deep security leadership, hands-on experience with SIEMs (Elastic), and regulatory knowledge to keep the program audit-ready and aligned with business goals.

Qualifications

• 8+ years information security experience, incl. leadership.
• CISSP or CISM required; CEH/CCSP/CRISC preferred.
• Experience with SOC 2 Type II programs and audits.
• Hands-on with SIEM platforms (Elastic) and EDR/XDR.
• Knowledge of NIST CSF, ISO 27001, and cloud security best practices.
• Experience with insurance industry cybersecurity requirements — NAIC Model #668 is preferred.
• Proven experience leading security incident response.

Responsabilités

• Lead the information security operations function: SIEM management, threat detection, vulnerability scanning, penetration testing program, and security incident response.
• Own and maintain the company’s SOC 2 Type II compliance program — coordinating with auditors, managing evidence collection, and remediating findings.
• Manage third-party/vendor risk management program and assess security posture of partners.
• Refine security awareness and training programs for all employees.
• Oversee security configurations of cloud environments, identity systems, and endpoint tools.
• Coordinate with leadership on cybersecurity policies and with regulators.

Connaissances

Security leadership

CISSP/CISM

SOC 2 Type II

SIEM Elastic

Vulnerability scanning

EDR/XDR

NIST CSF

ISO 27001

Cloud security

NAIC compliance

Incident response

Outils

Elastic SIEM

Description du poste

Wysh is seeking a Director of Security to translate security strategy into day-to-day programs and controls. You will own vulnerability management, SOC 2 Type II compliance, and third-party risk for a national operations scope in the U.S., with a base salary in the reported range.

This remote, full-time role requires deep security leadership, hands-on experience with SIEMs (Elastic), and regulatory knowledge to keep the program audit-ready and aligned with business goals.