EverCommerce - Director, Security Architecture & Engineering

EverCommerce (Nasdaq: EVCM) is a leading service commerce platform, providing vertically-tailored, integrated SaaS solutions that help more than 690,000 global service-based businesses accelerate growth, streamline operations, and increase retention. Its modern digital and mobile applications create predictable, informed, and convenient experiences between customers and their service professionals. With its EverPro, EverHealth, and EverWell brands specializing in Home, Health, and Wellness service industries, EverCommerce provides end-to-end business management software, embedded payment acceptance, marketing technology, and customer experience applications. Learn more at EverCommerce.com.

We are building an extraordinary company and looking for talented, energetic, and motivated people to join our team. You can learn more about our Company, Culture and Values here: https://www.evercommerce.com/about-us/careers/

We are looking for a Director, Security Architecture & Engineering, Security Architect to help us enable and mature our EverCommerce Security Team and program. This role also serves as our primary Security Architect in guiding how EverCommerce designs, builds, deploys, integrates, and optimizes security solutions and processes.

We're looking for a strong team leader that is invested in helping their stakeholders and co-workers succeed. They will have well-developed communication skills and can demonstrate proven technical ability, refined relationship management skills, and problem-solving skills. We are seeking an individual with a diverse background and that includes aptitude across several technologies, and skill sets. This role will require close coordination with other information security leaders and teams, security stakeholders and with internal and external software development teams.

Responsibilities - What You’ll Be Doing

• Create and maintain security architecture and engineering processes and procedures

• Design of system architectures which meet established cybersecurity requirements and align with customer needs

• This includes security requirements definition, documentation, and communication.

• Development of security architecture requirements and implementation guidance based on analysis of NIST 800-53 and or other security control frameworks

• Architect, design, implement, maintain, and operates information system security controls and countermeasures.

• Provides techniques and patterns for securing integration with external security system vendors and/or cloud providers

• Leads regular architecture and design reviews to ensure requirements implementation

• Evaluates and plays an active role in life-cycle management of multiple security technologies

• Identify security risks and control gaps within systems, designs, products, data flows, and processes; and recommend corrective architecture, integrations, controls, and operations

• Lead the development of security requirements, architectures, and documentation to ensure security controls are seamlessly integrated into new technology deployments

• Perform secure architecture and design reviews of new technology and security systems deployments, and collaborate with business teams to integrate secure-by-design principles into engineering projects and builds

• Maintain a clear view of the overall security architecture roadmap and strategic plan

• Leverage emerging technologies and advanced security practices to ensure EverCommerce is at the forefront of security for our solution groups and our customers

• Build, maintain and mature security architecture metrics and reporting

• Recruit, hire, train, coach and mentor security engineers and analysts

• Additional duties as required and assigned

Requirements

• At least 10 years of relevant work experience in a technical field (e.g. cybersecurity, software development, or systems administration), with at least 10 years people leadership experience, and at least 5 years people leadership experience specifically in security

• Bachelor's Degree in a technical discipline such as Cyber Security, Information Technology, Computer Science, or Information Systems - or equivalent professional experience

• Have at least one current Industry recognized security certifications; CISSP, CISM, CISA, GIAC or commensurate experience

• Excellent communication and interpersonal leadership skills, with the ability to communicate and collaborate effectively with cross-functional teams, matrixed organizations, and technical / and non-