Director of Security

Job Title: Director, Security 

Location: Remote/Hybrid - USA 

Reports to: Chief Information Officer

Department Name: Information Technology

Position Type: Full Time, Exempt

Position Summary

The Director, Security is responsible for establishing and leading Rubicon’s enterprise security strategy to protect date, ensure regulatory compliance, and safeguard the integrity of the SaaS platform and partner ecosystem. Reporting to the Chief Information Officer, this role oversees the development and enforcement of security policies, risk management frameworks, and governance structures, while directing day-to-day security operations. Working cross-functionally with Technology, Operations, and business stakeholders, this leader drives continuous improvement in security posture, operational resilience, and audit readiness.

Essential Duties & Key Responsibilities

• Direct the development and enforcement of enterprise security policies and roadmaps to safeguard data and ensure compliance across our SaaS platform.
• Develop, implement, and evolve a comprehensive risk management control framework designed to proactively safeguard our platform and partner ecosystem against both current and emerging risks; establish enterprise-level KPIs that provide Leadership with visibility into technical risk posture and operational health.
• Oversee day-to-day security activities, including: vulnerability management; incident response; identity access management; infrastructure, endpoint, and network security; and SOC operations.
• Lead the evolution of governance efforts utilizing industry frameworks; manage security audits and lead cross-functional teams to mitigate deficiencies and ensure satisfactory assessments.
• Assess security monitoring and develop programs to ensure the operational resilience of critical infrastructure in alignment with enterprise-wide business continuity objectives.
• Establish and refine a scalable governance architecture that aligns our security posture with appropriate standards while rationalizing redundancies, optimizing controls, and reducing operational overhead while maintaining rigorous oversight.
• Lead multi-disciplinary task forces and collaborate with various stakeholders to implement change management and improve compliance while managing risk exposure.
• Build, lead, and develop a high-performing team.
• Set clear goals, priorities, and performance expectations; ensure accountability.
• Provide regular coaching, feedback, and performance management.
• Drive employee engagement, team culture, and a positive work environment.
• Lead hiring, onboarding, and employee development efforts.
• Ensure compliance with company policies, practices, and partner with HR on employee matters.
• Ability to travel and/or work onsite up to 10% on an annual basis.
• Perform other duties as assigned or apparent.

Supervisory Responsibilities:

• This job has direct and indirect supervisory responsibilities.

Experience & Qualifications:

• High School Diploma and Bachelor’s degree in Security, Cybersecurity, Computer Science, Business or a related field required.
• In lieu of a degree, 10+ years of experience in information security, IT risk, compliance, auditing, or a related role.
• Proven experience managing audits and coordinating with external assessors and regulators.
• Broad exposure to cybersecurity and compliance processes and activities, including security strategy, incident response, threat and risk assessment, network security, and operational resilience.
• A comprehensive suite of certifications is highly preferred, including CISM, CISSP, CISA, CPA, and CRMA.
• Strong verbal and written communication skills, with the ability to translate technical and compliance risks into business impact.
• The ability to act and operate appropriately in both a remote and in-office setting.
• Ability to work cooperatively and collaboratively with all levels of employees and management to maximize performance, creativity, problem solving, and results.
• Strong organizational skills