Senior Director, InfoSec & Platform Security (SaaS)

EverCommerce; Denver (CO); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Wellness stipend

Udemy training

401k with company match

Paid time off

Employee Stock Purchase Program

Job summary

EverCommerce is seeking a Senior Director Information Security to lead a scalable, business-aligned security program across a diverse SaaS portfolio. You will balance strategic planning with hands-on execution, reporting to the CISO.

The role partners with Legal, Compliance, People, and product teams; you will drive platform security as code, shift-left appsec, incident response, and risk governance while fostering an engineering mindset.

Qualifications

• Proven track record building or modernizing SIEM/SOAR pipelines, automated detection engineering, and incident response operations.
• Hands-on engineering background in AWS cloud infrastructure, Infrastructure-as-Code (Terraform/CloudFormation), and container orchestration (ECS, EKS, Docker).
• 6+ years of direct people leadership in high-growth, multi-disciplinary teams.
• 12+ years of progressive leadership across cloud security, software platform security, security strategy, architecture, engineering, controls, testing, vulnerability management, incident response, and cyber resiliency.
• Experience designing and executing continuous compliance programs under SOX 404(b), HIPAA, PCI DSS, or SEC reporting frameworks.
• Ability to translate complex security risks into clear business metrics for executives and boards.

Responsibilities

• Proven track record building or modernizing SIEM/SOAR pipelines, automated detection engineering, and incident response operations.
• Lead enterprise incident response, digital forensics, RCA, and executive crisis communications.
• Direct internal and contingent red-team penetration testing across HIPAA, PCI, and SaaS platforms, driving cross-team CTF exercises and threat modeling.
• Transition GRC to API-driven, continuous control validation supporting SOX 404(b), HIPAA, PCI DSS, NIST CSF, EHNAC, and SEC disclosures.
• Modernize the SOC, optimizing SIEM telemetry and SOAR automation.
• Foster engineering mindset via internal security guilds to upskill teams in secure coding and cloud operations.
• Develop multi-year cybersecurity strategies and roadmaps; align investments with business priorities.
• Support mergers, acquisitions, and divestitures from a cybersecurity perspective; drive AI/automation across security ops.

Skills

Security leadership

SIEM & SOAR

AWS cloud

IaC (Terraform)

Container orchestration

GRC programs

M&A security

Threat intelligence

Risk management

Security architecture

Education

Bachelor’s or Master’s in CS/Cybersecurity/Engineering

Tools

Elastic Cloud

Torq SOAR

CrowdStrike

Okta

AWS Secrets Manager

PAM

TruffleHog

Job description

EverCommerce is seeking a Senior Director Information Security to lead a scalable, business-aligned security program across a diverse SaaS portfolio. You will balance strategic planning with hands-on execution, reporting to the CISO.

The role partners with Legal, Compliance, People, and product teams; you will drive platform security as code, shift-left appsec, incident response, and risk governance while fostering an engineering mindset.