Remote Director of Security & Compliance (Insurance)

Wysh; United States; Remote; USD 190,000 - 220,000; Full time

Benefits offered by this job

Unlimited PTO

Paid Holidays

Paid Summer Fridays

Paid parental leave

Job summary

Wysh is seeking a Director of Security to translate security strategy into programs, controls, and incident response within a remote U.S. team. You will own vulnerability management, SOC 2 Type II, third-party risk, and security awareness, reporting to the CISO.

The role requires 8+ years in information security with leadership experience and certifications (CISSP/CISM). Base salary ranges from $190,000 to $220,000, with remote work across the United States.

Qualifications

• 8+ years of information security experience, with at least 3 years in a leadership or program role.
• CISSP, CISM, or equivalent certification required; additional certifications preferred.
• Experience managing SOC 2 Type II programs and security audits.
• Hands-on with SIEM platforms (Elastic or equivalent), vulnerability scanners, and EDR/XDR tools.
• Strong knowledge of NIST, ISO 27001, and cloud security best practices.
• Experience with insurance cybersecurity requirements — NAIC Model #668 and state regulations.
• Proven experience leading security incident response.

Responsibilities

• Lead the information security operations function: SIEM management, threat detection, vulnerability scanning, and incident response.
• Own SOC 2 Type II compliance program — coordinate with auditors and remediate findings.
• Design and manage third-party/vendor risk assessment and governance.
• Refine security awareness and training for all employees, with modules for operations, engineering, and leadership.
• Manage security configuration of cloud environments, identity systems, and endpoints with IT teams.
• Maintain information security policies, standards, and procedures.
• Coordinate with CISO and regulators on cyber market conduct and NAIC compliance.
• Lead the incident response plan — tabletop exercises and breach readiness.
• Track and report security KPIs to CTO/CISO and executives.
• Evaluate emerging security tech and investments to improve posture.

Skills

Security leadership

Security program management

SIEM management

Vulnerability management

Incident response

Cloud security

Compliance auditing

Education

CISSP

CISM

CEH

CCSP

CRISC

Tools

Elastic

Vulnerability scanners

EDR/XDR

Job description

Wysh is seeking a Director of Security to translate security strategy into programs, controls, and incident response within a remote U.S. team. You will own vulnerability management, SOC 2 Type II, third-party risk, and security awareness, reporting to the CISO.

The role requires 8+ years in information security with leadership experience and certifications (CISSP/CISM). Base salary ranges from $190,000 to $220,000, with remote work across the United States.