Global Director, Information Security & Compliance

The Vertex Companies LLC

New York (NY)

On-site

USD 159,000 - 432,000

Full time

12 days ago

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

401(k) matching

Tuition reimbursement

Healthcare options

Life Insurance

Job summary

The Vertex Companies, LLC (VERTEX) seeks a Director of Information Security to lead fraud, risk, and compliance across a cloud-first enterprise spanning US, UK, and UAE. Reporting to the CISO, you will own security strategy and governance, drive SOC 2, HIPAA, and GDPR compliance, and enable business growth with a low-friction user experience.

You will secure a SaaS-first ecosystem (Microsoft 365 E5, Azure, Salesforce, Egnyte, Box, Workday) and build a distributed security organization with

Qualifications

Bachelor's degree and 12 years of related experience or Master’s degree and 8 years of related experience.
Experience owning SOC 2 audits and compliance-evidence programs to attestation.
Strong knowledge of HIPAA Security/Privacy Rules and safeguards.
GDPR data-protection controls and vendor risk management.
Experience securing SaaS platforms (MS 365, Azure, Salesforce, Box, Egnyte, Workday).
Expertise in IAM, MFA, Conditional Access, and Zero Trust.

Responsibilities

Operationalize the enterprise information security strategy with roadmaps, governance programs, and risk reduction outcomes.
Build, lead, and develop a global security organization including SOC/MSSP partners.
Coordinate with HR, Legal, Privacy, IT to strengthen governance and security ownership.
Establish security KPIs, risk metrics, and control maturity roadmaps for leadership visibility.
Conduct enterprise risk assessments and vendor reviews; maintain risk registers.
Lead third-party security risk management including due diligence and ongoing monitoring.
Own security project portfolio and coordinate MSSP and vendors for strategic initiatives.
Oversee secure adoption of AI, automation, and cloud collaboration with secure-by-design principles.
Manage SOC 2 compliance program from design to attestation and readiness.
Lead HIPAA compliance efforts and ensure safeguards meet requirements.
Oversee GDPR compliance with data protection and breach readiness.