Director, Cloud Security

Flight Itinerary (About The Role)

To achieve this vision, we’re looking for a Director of Cloud Security to ensure FLYR advances the protection of its cloud infrastructure and SaaS applications.

You’ll own the security of the cloud infrastructure powering FLYR’s product and services offerings and enabling our internal R&D efforts, and  ensure that FLYR consistently meets the security and compliance expectations of our customers. 

This role reports to VP of Engineering.

What Your Journey Will Look Like (Responsibilities)

• Define and manage a roadmap of short and long term investments in security of our Cloud-hosted customer data,  applications, environments, and infrastructure. Identify opportunities to reduce cloud security risk and lead the team in defining and implementing those solutions.  Lead engineering staff to define and execute security engineering projects.  
• Collaborate with senior leadership and peer Engineering leaders to assess data protection, cloud infrastructure, and Saas application security needs, define remediation plans, and report on progress of remediation.
• Collaborate with Sales, Product, and Legal to ensure that requirements around security and data protection are defined and incorporated into FLYR’s product roadmap and customer contracts.
• Lead and drive cross-functional efforts across product development and IT organizations to establish policies, practices, and controls to meet security objectives. Create, maintain, and manage policies, practices, and documentation around Cloud security.
• Ensure FLYR meets the data protection and security compliance  expectations of our customers.      Ensure applications, environments, and infrastructure meet certification requirements. Ensure certification audits and security audit evidence collection is routine.   
• Directly supervise a team of security engineers. Provide mentorship and training, and promote success in their career path at FLYR.
• Ensure security engineering team representation and participation in product development requirements and software architecture review processes.   
• Routinely interface with our public cloud providers to ensure FLYR is leveraging our cloud vendor’s offerings and resources in the security space.  
• Manage a budget for cloud security initiatives.  Review security technologies and tools, drive tool and vendor evaluation processes, and determine proof-of-value. 

What To Pack For This Trip (Qualifications)

• Significant experience managing cloud security engineering teams.  Extensive experience in ensuring applications security, infrastructure security, and data security on public clouds.  
• Demonstrated ability to define project plans for security, compliance, and data protection initiatives and coordinate with application and engineering teams  to drive projects to closure.   
• Familiarity with the following frameworks and standards: Payment Card Industry Data Security Standard (PCI-DSS), General Data Protection Regulation (GDPR), ISO27001 and Systems and Organizational Controls 2 (SOC2).    
• Extensive exposure to full audit cycle for SOC2 and PCI-DSS.  Familiarity with the audit process and in driving audit evidence collection and security audit remediation projects.  
• Excellent communication and collaborative skills. Ability to clearly communicate status, blockers, risks and dependencies to executives. Leadership ability to engage cross-functionally and engage and influence with stakeholders and decision makers. 
• Ability to manage operating budgets, define vendor selection processes, and  interact with vendors to negotiate pricing and service.
• Strong leadership and team management experience. A track record of leading skilled engineers, building high performing teams, and developing talent. Skilled in mentoring, providing guidance, addressing conflicts, and facilitating communication. 

First-Class Amenities

• Regular employment contract
• Equity in Series C startup with high growth potential
• Flexible working hours
• Complimentary Breakfast/Lunch (in-office)
• Gym in the office building
• Pension Plan
• Top-quality tech equipment
• Annual educational fund
• LinkedIn Learning access
• Many more!

Last updated on Aug 22, 2024