lever
Director of IT & Security, CISO
Redoxengine
Remote, USA
Full-time
Senior Level
Remote
USD 224000-260000 yearly
Discovered 1 weeks ago
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanFull Job Posting
- Security Strategy & Leadership: Own end-to-end information security strategy across cloud, application, infrastructure, and corporate environments. Define a pragmatic security roadmap aligned to business risk, regulatory requirements, and engineering velocity. Serve as the executive owner for security posture, risk management, and incident response. Act as a trusted advisor to the CTO and executive team on security, risk, and operational tradeoffs.
- Security Engineering & DevSecOps: Drive a DevSecOps-first operating model, embedding security into CI/CD pipelines, infrastructure as code, and developer workflows. Partner deeply with engineering leadership to make security scalable, automated, and measurable. Lead threat modeling, secure design reviews, and risk assessments for new platform initiatives. Champion policy-as-code, guardrails, and automation over manual process.
- Cloud, Application & Infrastructure Security: Own security architecture and operations for a primarily AWS-based environment. Lead application security programs, including secure SDLC, dependency scanning, SAST/DAST, penetration testing, and vulnerability management. Own identity and access management strategy with Okta as the backbone. Ensure strong detection, alerting, and response across endpoints and cloud workloads (e.g., CrowdStrike, RAD).
- Security Operations & Incident Response: Build and run effective security operations, including monitoring, investigation, incident response, and post-incident learning. Lead incident response for both security and IT incidents, serving as the calm point of accountability. Run tabletop exercises and continuously improve response playbooks. Manage vendor relationships, including CrowdStrike, Flashpoint, RAD, and Okta.
- Corporate IT & Enterprise Systems: Own corporate IT strategy and execution, focused on reliability, security, and employee productivity. Lead end-user computing, device management, endpoint security, identity lifecycle management, and access controls. Oversee IT systems, including identity, email, collaboration tools, endpoint management, and SaaS access governance. Drive automation and standardization across onboarding, offboarding, access management, and device lifecycle. Partner with People Ops, Legal, and Finance on IT processes, audits, and vendor management.
- Compliance, Risk & Healthcare Context: Own healthcare-related security and compliance programs (e.g., HIPAA, SOC 2). Translate regulatory requirements into practical, engineering-friendly controls. Lead third-party risk management and vendor security reviews. Support customer security reviews and serve as an executive point of contact on security matters.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Redoxengine
Senior Director, Enterprise Customer Success
, USA
Discovered YesterdayFull-time
Senior Pricing Manager
, USA
Discovered 2 days agoFull-time
Enterprise Technical Project Manager
, USA
Discovered 2 days agoFull-time
Associate Production Support Engineer, Tier I
, USA
Discovered 2 days agoFull-time
Senior Integration Coordinator
, USA
Discovered 1 weeks agoFull-time
Sr. Strategic Client Executive (Providers)
, USA
Discovered 1 weeks agoFull-time
Senior SDR (Sales Development Representative)
, USA
Discovered 1 weeks agoFull-time
Sr. Technical Account Executive (TAE)
, USA
Discovered 1 weeks agoFull-time