Director of Security, IT, & Compliance

Who We Are

Murmuration is a nonprofit organization that amplifies the power of civic engagement by providing data, digital tools, and research-driven insights to community-focused organizations so that together we can create an America where everyone can lead healthy, free, and dignified lives.

Every day, people are trying to shape our future for the better. Fighting for water that’s safe to drink. Schools that serve students equitably. Gun laws that make sense. And rallying people who care like we do. And yet too often the skillful organizers working to mobilize communities lack access to technology that could supercharge their efforts. Knocking on every door instead of knowing which will open most easily. And going up against outside interests that have half the heart, but twice the tools.

In communities across America, Murmuration’s partners are leveraging our data, tools, and insights to help thousands of organizers orchestrate millions of individual people to do big things together. Demand big things together. To create the world they want. Together.

About the Position

The Director of Security, IT & Compliance will oversee and shape the teams responsible for Murmuration’s security, IT, and compliance strategies.  The Director of Security, IT & Compliance plays a fundamental role in powering Murmuration’s platform and partners — and instilling trust in what we do and how we handle data systems.  This role is tasked with defining and implementing scalable processes, mitigating risks, and ensuring the integrity, security, compliance, and reliability of the organization’s technology infrastructure. By fostering collaboration between the Security Engineering Team, IT Team, and other key stakeholders, the Director will drive cross-functional initiatives and operational excellence. With a focus on innovation, security, and team leadership, this role is ideal for a strategic and proactive leader passionate about building secure, efficient, and resilient systems to support Murmuration’s mission.

Job Level: M5

What You’ll Do

• Define and execute a comprehensive Security, IT, and Compliance strategy to support Murmuration’s growth and mission;
• Develop and maintain roadmaps for Security, IT, and Compliance initiatives, setting clear priorities and measurable outcomes;
• Establish and execute on a risk management framework, including gap analysis with remediation timelines to identify, assess, and mitigate risks, ensuring regular review and updates;
• Oversee the security and operational reliability of Murmuration’s IT infrastructure, including cloud environments, ensuring reliability and scalability;
• Lead compliance certification efforts and collaborate with internal teams to ensure adherence to relevant frameworks like SOC 2, NIST CSF, ISO27001, and privacy laws. Work with Legal to determine what other frameworks with which to align; this may include GDPR, HIPAA, COPPA, and SOX regulations, as well as considerations specific to 501c3 and 501c4 data hygiene;
• Review and refine processes for key workflows, ensuring effective cross-functional collaboration and timely handling of incoming requests;
• Lead, mentor, and grow the Security Engineering and IT teams, fostering a culture of innovation, accountability, and learning;
• Implement and maintain robust security controls, monitoring systems, and incident response processes to protect Murmuration’s technical assets;
• Manage IT procurement, vendor relationships, and budgets to ensure alignment with organizational goals and cost efficiency; and
• Partner with teams across Engineering, Finance, and People to align on compliance requirements and support organization-wide initiatives.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (Note: Work experience can be substituted for degree requirements);
• 10+ years of progressive experience in IT and Security with at least 5 years in leadership roles;
• Strong knowledge of IT infrastructure, cloud technologies (AWS preferred), and cybersecurity best practices;
• Experience implementing and managing compliance framework(s), such as SOC 2, NIST CSF, ISO27001, GDPR, or HIPAA;
• Proven ability to define and execute strategic plans and translate them into actionable roadmaps;
• Demonstrated success in building and leading high-performing technical teams;
• Strong understanding of risk management frameworks and experience, mitigating risks across IT and security domains;
• Proficiency in automation and infrastructure tools like Terraform, Ansible, or similar technologies;
• Exceptional communication and interpersonal skills, with the ability to collaborate effectively across teams