Security & IT Director: Lead Compliance & Growth (Hybrid)

PayHOA, LLC; Lexington (KY); Hybrid; USD 150,000 - 180,000; Full time

Benefits offered by this job

Stock options

Medical, dental, vision insurance

401(k) with company contribution

Flexible PTO

Job summary

PayHOA is seeking a hands-on Director of Security & IT to lead the entire security program, policy, and incident response. You will define the roadmap, manage audits, and grow the team as the company scales. The role sits outside R&D to avoid delivery pressure and ensures independent security posture.

You will collaborate with Finance and R&D, shape a risk-based plan, and report to leadership with clear metrics. A strong security background in cloud and payments is essential.

Qualifications

• 4–5+ years in security leadership, running programs day-to-day.
• Led or core owner of SOC 2 (Type II) or comparable audit.
• Handled real incidents (account takeover, phishing) and lessons learned.
• Experience securing a cloud environment (AWS) with IAM, logging and encryption.
• Knowledge of web app security and OWASP Top 10 for multi-tenant apps.

Responsibilities

• Own security roadmap, risk-based and aligned with leadership.
• Own risk register and risk-acceptance process with clear owners.
• Maintain security policy set (access, vendor risk, data handling, IR, BC/DR).
• Define metrics to show controls work and report to leadership.

Skills

Security leadership

SOC 2 audit

AWS security

Identity & access

MFA rollout

Security logging

Incident response

Tools

AWS security tooling

Job description

PayHOA is seeking a hands-on Director of Security & IT to lead the entire security program, policy, and incident response. You will define the roadmap, manage audits, and grow the team as the company scales. The role sits outside R&D to avoid delivery pressure and ensures independent security posture.

You will collaborate with Finance and R&D, shape a risk-based plan, and report to leadership with clear metrics. A strong security background in cloud and payments is essential.