Strategic Chief of Cyber Security & Risk

Aptive Environmental; Provo (UT); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health, Dental, Vision

Pet insurance

Life insurance

401K with match

Paid holidays and PTO

Advancement opportunities

Culture

Job summary

Aptive Environmental is seeking a Director of Cyber Security to define the enterprise security strategy and grow a high-performing team in Provo, Utah. This role balances protecting customer data and payment systems with the agility required by a fast-growing company.

Responsibilities include building the security program across engineering, SecOps, and GRC, and managing audits and vendor risk while advancing privacy compliance and data security for our SaaS ecosystem.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• 10+ years in information security with 5+ years leading teams and building security programs.
• Broad, hands-on security expertise across architecture, cloud, app/API security, SecOps, IAM.
• Experience protecting payment systems and sensitive customer data at scale with PCI DSS obligations.
• Familiarity with PCI DSS, SOC 2, NIST/CIS and privacy laws (CCPA/CPRA).

Responsibilities

• Define and lead the enterprise information-security strategy, roadmap, policies, standards, and budget.
• Build, lead, and develop the security team across security engineering, SecOps, and GRC.
• Identify, quantify, prioritize, and drive remediation of enterprise security risk; report posture to executive leadership.
• Protect payment and customer data; secure billing/payment systems, the data platform, and sensitive data flows across the SaaS/gateway ecosystem.
• Own detection, monitoring, vulnerability management, and incident response; establish and exercise IR/breach plans.
• Drive compliance with PCI DSS, SOC 2, and privacy regulations; own audits, evidence, and vendor/third-party risk.
• Drive company-wide security awareness and shared responsibility.
• Perform other related duties as assigned

Skills

Security leadership

Security architecture

Cloud security

Application security

Incident response

Risk management

Compliance (PCI DSS, SOC 2)

Vendor risk management

Data privacy

Team building

Education

Bachelor's degree in CS/InfoSec

Job description

Aptive Environmental is seeking a Director of Cyber Security to define the enterprise security strategy and grow a high-performing team in Provo, Utah. This role balances protecting customer data and payment systems with the agility required by a fast-growing company.

Responsibilities include building the security program across engineering, SecOps, and GRC, and managing audits and vendor risk while advancing privacy compliance and data security for our SaaS ecosystem.