Senior Director, Information Security & Cloud Architecture

EverCommerce; United States; Remote; USD 225,000 - 275,000; Full time

Benefits offered by this job

Health and wellness benefits

401k with up to 4% match

Employee Stock Purchase Program

Wellness stipend

Job summary

EverCommerce is seeking a Senior Director Information Security to lead a scalable, business-aligned security program across a multi-product SaaS portfolio. This role focuses on engineering-first security, incident response, and automated compliance, reporting to the CISO.

The ideal candidate combines hands-on engineering with strategic leadership, able to balance fast-paced growth with strong governance and risk management. Remote or hybrid within the US is supported.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Computer Engineering, or related field.
• 12+ years of progressive information security leadership across cloud, software platforms, and risk.
• 6+ years of leading multi-disciplinary security teams in high-growth SaaS/tech.

Responsibilities

• Lead security architecture, DevSecOps, and enforce secure baselines across platforms (Terraform, AWS).
• Direct SOC modernization, SIEM/SOAR pipelines, and incident response operations.
• Drive continuous compliance for SOX 404(b), HIPAA, PCI DSS, and NIST CSF.

Skills

Leadership

Security strategy

Cloud security

Incident response

Communication to executives

Education

Bachelor's or Master's in CS/Cybersecurity/Engineering

Tools

AWS

Terraform/CloudFormation

ECS/EKS/Docker

SIEM/SOAR (Elastic Cloud, Torq)

Okta/Netskope

Job description

EverCommerce is seeking a Senior Director Information Security to lead a scalable, business-aligned security program across a multi-product SaaS portfolio. This role focuses on engineering-first security, incident response, and automated compliance, reporting to the CISO.

The ideal candidate combines hands-on engineering with strategic leadership, able to balance fast-paced growth with strong governance and risk management. Remote or hybrid within the US is supported.