Job Description

We are seeking a dynamic and action-oriented Sr. Director, Security Engineering to lead our company’s information security function. This is a hands-on role for a results-driven leader who will own the security posture of a matrixed, global technology organization. The ideal candidate will not only have deep expertise in cybersecurity but will also be a proactive problem-solver who excels in both operational execution and leadership.  We need a leader who thrives in "doing the work" and leading by example, while driving teams to implement security solutions and handle incidents.

This role will oversee the proper operation, configuration, and reporting of all security tools, while also managing compliance and audit activities across the organization. The right person will take charge of critical security incidents and drive remediation in collaboration with cross-functional teams.

This position reports to the Head of IT & Business Analytics and is based out of one of our Platform locations (San Diego, Irvine, Bozeman or Logan) or Providence, RI.

As the Sr. Director of Security Engineering, you will have an opportunity to:  

Security Leadership & Operational Management:

• Own and execute the information security strategy across the organization, ensuring alignment with business goals.

• Actively manage day-to-day security operations, including threat detection, response, and remediation, as well as overseeing the performance and integrity of security tools and platforms.

• Lead incident response efforts, personally directing or delegating tasks to internal teams (security specialists, server, and network management teams) to ensure swift and effective remediation of threats.

• Ensure that the organization meets all security governance, risk management, and compliance requirements (e.g., GDPR, CCPA, PCI-DSS, SOX), taking direct ownership of audits and compliance initiatives.

• Comfortable stepping into the middle of security issues and leading the organization (technical & non-technical) to effective solutions.

• Have a servant leadership attitude on the area of security awareness.  Seek moment when the organization can learn and improve our security stance.

Action-Oriented Security Execution:

• Be an active "doer" who works closely with technical teams, ensuring successful implementation of security measures across infrastructure, network, and application layers.  This involves pulling technical resources from different IT functions into dynamic work groups to find solutions to problems.

• Take ownership of security solutions by working with owners of tools (SIEMs, firewalls, endpoint protection, etc.), ensuring they are properly configured, monitored, and reported.

• Lead vulnerability management, penetration testing, and patch management processes, driving teams to timely and efficient results.

Matrixed Leadership & Team Collaboration:

• Work in a matrixed environment, coordinating security efforts across multiple teams (server, network, applications) where direct management isn’t always possible. Collaborate and lead through influence and directive leadership.

• Act as a hands-on leader for internal and external security teams during critical security incidents, ensuring timely responses, escalation, and communication to executive teams when needed.

• Provide actionable guidance and security expertise to other technology teams, helping them understand and implement security best practices in their daily operations.

• Provide a practical view of security issues and resolution.  In a world where issue can be “anywhere”, you need to focus us on those areas most important to our secure operation.

Audit, Compliance, and Reporting:

• Oversee audit and compliance activities, ensuring that security policies and controls are adhered to and can withstand external audits and internal reviews.

• Develop and deliver timely reports on the security posture to the executive team, CIO, and stakeholders, ensuring transparency and actionable insights without overburdening the organization with bureaucratic oversight.

Stakeholder Communication:

• Communicate with executive leadership and stakeholders (including the board) on security incidents, status updates, and strategic improvements, while maintaining a strong focus on execution over long-winded discussions.

• Strong written and verbal communicatio