Security Director — SOC 2, Incident Response, Remote

Finalsite; Glastonbury (CT); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Finalsite seeks a hands-on security leader to formalize its security program and drive SOC 2 Type II attestation across a multi-product, multi-cloud environment.

You will own the security roadmap, lead a distributed team, coordinate with the CISO, and ensure evidence, policies, and customer trust materials are current and auditable.

This role reports to the Senior Director of SRE and Security and partners with sales, legal, and engineering to reduce risk.

Qualifications

• Eight or more years in information security, including leadership of a security team.
• Hands-on credibility across application security and cloud infrastructure.
• Experience guiding a SOC 2 Type 2 audit or ISO 27001.
• Experience leading customer security reviews and vendor risk assessments.
• Proven incident response leadership coordinating engineers, executives, and customers.
• Ability to translate risk into clear executive communications.
• Experience partnering with a CISO to own security risk decisions.
• Experience working with engineering teams to adopt security requirements.

Responsibilities

• Lead the security team: set priorities, hire, develop, and evaluate engineers.
• Build and run the security roadmap with risk-based prioritization.
• Lead SOC 2 Type 2 attestation scope, controls, remediation, and evidence collection.
• Own Vanta platform and ensure trust portal reflects current security posture.
• Review customer security questionnaires and external assessments.
• Establish secure design practices and threat modeling.

Skills

Information security

Security leadership

SOC 2

Cloud security

Vendor risk

Tools

Vanta

Drata

Secureframe

Job description

Finalsite seeks a hands-on security leader to formalize its security program and drive SOC 2 Type II attestation across a multi-product, multi-cloud environment.

You will own the security roadmap, lead a distributed team, coordinate with the CISO, and ensure evidence, policies, and customer trust materials are current and auditable.

This role reports to the Senior Director of SRE and Security and partners with sales, legal, and engineering to reduce risk.