Senior InfoSec Director | Player-Coach, GRC & Risk Leader

PMA Companies; Whitpain Township (PA); On-site; USD 150,000 - 210,000; Full time

Job summary

PMA Companies is seeking a Director of Information Security to design, implement, and operate a comprehensive information security program across three affiliated companies. The role blends technical leadership, risk management, and governance, risk, and compliance oversight.

The candidate will lead a small, hands-on team and stay deeply involved in day-to-day security operations and architecture, translating risks into actionable business terms for executives and clients.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field or equivalent experience.
• 8+ years of progressive experience in information security, including leadership or senior technical roles.
• Proven experience managing and mentoring small security teams.
• Strong hands-on technical expertise in Okta, Zscaler, Azure, Microsoft 365, Proofpoint, CrowdStrike, Splunk.
• Experience leading security risk assessments and remediation initiatives.

Responsibilities

• Lead and manage a small, highly technical information security team with mentorship and hands-on support.
• Design, implement, and maintain security controls across identity, endpoint, network, cloud, and SaaS environments.
• Provide direct technical oversight for security incidents, investigations, and response activities.
• Ensure consistent security posture across three affiliated companies while accommodating business-specific needs.
• Partner with IT and engineering teams to securely design and deploy cloud/hybrid environments.

Skills

Leadership

Hands-on security

Risk management

Governance, risk & compliance

Communication

Cloud security

Education

Bachelor's degree in Information Security or related field

Tools

Okta

Zscaler

Azure

Microsoft 365

Proofpoint

CrowdStrike

Splunk

Job description

PMA Companies is seeking a Director of Information Security to design, implement, and operate a comprehensive information security program across three affiliated companies. The role blends technical leadership, risk management, and governance, risk, and compliance oversight.

The candidate will lead a small, hands-on team and stay deeply involved in day-to-day security operations and architecture, translating risks into actionable business terms for executives and clients.