Interim Head of Information Security (Fully Remote)

Partner Company; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Partner Company is seeking a senior information security leader to own and continuously improve the organization's security posture. You will define and evolve the security strategy aligned with business priorities and threat landscape, and collaborate with Engineering, IT, Legal, and Compliance to embed security into development and platform operations.

You will lead PCI-DSS and SOC 2 readiness and strengthen threat detection through logging, monitoring and alerting, while coaching a small

Qualifications

• Own and lead enterprise information security program and roadmap.
• Translate business priorities into security controls.
• Establish robust incident detection and response practices.

Responsibilities

• Own and continuously improve the organization's overall information security posture.
• Define and evolve the security strategy aligned with business priorities and threat landscape.
• Work closely with Engineering, IT, Legal, and Compliance to embed security into development and platform operations.
• Engage confidently with engineering teams on architecture and security decisions.
• Lead preparations for PCI-DSS and SOC 2 by translating compliance expectations into practical controls.
• Strengthen threat detection and response through effective logging, monitoring, and alerting.
• Support and develop a small team while fostering accountability for security.
• Evaluate security tools and contribute to build-versus-buy decisions.

Skills

Information security leadership

Security strategy

Threat modeling

Cross-functional collaboration

Security architecture

Tools

SIEM

PCI-DSS compliance

SOC 2 readiness

Job description

• Own and continuously improve the organization's overall information security posture.
• Define and evolve the security strategy aligned with business priorities and threat landscape.
• Work closely with Engineering, IT, Legal, and Compliance to embed security into development and platform operations.
• Engage confidently with engineering teams on architecture and security decisions.

Compliance:

• Lead preparations for PCI-DSS and SOC 2 by translating compliance expectations into practical controls.
• Strengthen threat detection and response through effective logging, monitoring, and alerting.
• Support and develop a small team while fostering accountability for security.
• Evaluate security tools and contribute to build-versus-buy decisions.

Partner Company

The company is a software-driven organization focused on strengthening its security posture. It fosters a collaborative culture with flexible working arrangements and an emphasis on measurable outcomes.