Senior Director, Information Security and Platform Security

EverCommerce; Denver (CO); On-site; USD 225,000 - 275,000; Full time

Benefits offered by this job

Flexible work location (remote/on-site

Wellness stipend

401k with match

Generous PTO

Employee Stock Purchase Program

Job summary

EverCommerce is seeking a Senior Director Information Security to lead a scalable security program for a diverse SaaS portfolio. The role blends strategic planning with hands-on execution, collaborating with Legal, Compliance, People, and Product teams to enable growth while managing cyber risk.

The position focuses on DevSecOps, platform security, incident response, and continuous compliance across SOX, HIPAA, PCI DSS, and NIST. Excellent executive communication and mentorship are essential.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Computer Engineering, or related field.
• 12+ years of progressive leadership across information security domains including cloud and software platform security.
• 6+ years of direct people leadership in multi-disciplinary teams within SaaS or enterprise tech.
• Hands-on engineering in AWS, IaC (Terraform/CloudFormation), and container orchestration (ECS/EKS/Docker).
• Proven experience building/modernizing SIEM/SOAR pipelines, automated detection, and IR operations.
• Experience designing continuous compliance programs under SOX 404(b), HIPAA, PCI DSS, or SEC.
• Excellent executive communication translating risk into business metrics.

Responsibilities

• Engineering-First Security Architecture & DevSecOps (Shift‑Left).
• Platform Security-as-Code with Terraform modules and account isolation.
• Shift-Left AppSec & Container Security with automated gates in CI/CD.
• Golden Container & AMI approval pipelines to prevent drift.
• Central Secrets & Cryptographic lifecycle with rotation policies.
• Incident Response & Cyber Resiliency leadership.
• 24x7 Detection & Threat Hunting with SOC modernization.
• Zero-Code Infrastructure Observability using eBPF/OpenTelemetry.
• Crisis Management & Incident Response with RCA & exec comms.
• Adversary Emulation & Red/Purple Teaming across HIPAA/PCI/SEC platforms.

Skills

Security leadership

Cloud security

Security architecture

Executive communication

Cross-functional collaboration

Threat modeling

Education

Bachelor’s or Master’s in CS/Cybersecurity/Engineering

Tools

AWS

Terraform/CloudFormation

ECS/EKS/Docker

Elastic SIEM

Torq SOAR

Okta

Netskope

TruffleHog

PAM

Lumos AI

Job description

EverCommerce is seeking a Senior Director Information Security to lead a scalable security program for a diverse SaaS portfolio. The role blends strategic planning with hands-on execution, collaborating with Legal, Compliance, People, and Product teams to enable growth while managing cyber risk.

The position focuses on DevSecOps, platform security, incident response, and continuous compliance across SOX, HIPAA, PCI DSS, and NIST. Excellent executive communication and mentorship are essential.