Director, Information Security

• Leadership and Team Management:
• Develop and execute the company’s information security strategy, aligning it with business goals and objectives.
• Establish and maintain relationships with internal stakeholders to foster a security-aware culture.
• Provide executive-level guidance on security measures and initiatives, ensuring they are integrated into the overall company strategy.
• Manage the information security budget effectively, allocating resources for key security projects and initiatives.
• Foster a collaborative and high-performance culture within the team.
• Set clear objectives and goals for the team members and ensure they are aligned with the overall security strategy.
• Conduct regular performance evaluations, provide constructive feedback, and support professional development plans for team members.
• Recruit and onboard new team members as needed.
• Collaborate with Platform and Dev/Ops teams to ensure security best practises are being met
• Security Engineering Management:
• Develop and execute a comprehensive security strategy, including the design and implementation of security infrastructure, policies, and procedures.
• Collaborate with cross-functional teams to assess security risks and requirements/configurations for new technologies, systems, and services.
• Design and implement secure network architectures, including firewalls, intrusion detection systems, data encryption, and access controls.
• Ensure the effective deployment and configuration of security tools and technologies to protect critical assets.
• Oversee Application Security practices working closely with Engineering teams, Dev/Ops and Platform teams.
• Familiarity with detection engineering functions.
• Security Operations Management:
• Oversee the day-to-day security operations, monitoring systems, and responding to security incidents promptly.
• Lead oversight of the detection engineering / management of alerting and detections.
• Implement and manage security incident response functions and procedures; including investigation, containment, and resolution of security breaches.
• Create and maintain operational metrics.
• Manage relationships with MssP and XDR providers.
• Develop and maintain security incident response plans, including coordination with internal stakeholders and external partners.

• Proven experience (+ 5 years) in managing security engineering and operations in a complex IT environment. Bachelor’s degree in Computer Science, Information Security, or a related field is desirable.
• Strong knowledge of security principles, practices, frameworks, and industry standards (e.g., ISO 27001, NIST, CIS).
• Extensive experience in designing and implementing security infrastructure; including firewalls, IDS/IPS, SIEM, endpoint protection, etc.
• Familiarity with cloud security principles and technologies (e.g., AWS, Azure, GCP).
• Strong leadership and team management skills, with the ability to inspire and motivate a diverse team.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
• Relevant certifications (e.g., CISSP, CISM, GIAC) are highly desirable.

• 401 (k) with employer match
• Medical, dental, and vision with HSA and FSA options
• Competitive vacation and sick time off, as well as dedicated volunteer days
• Access to wellness support through Employee Assistance Program, physical and mental health wellness programs
• Pet care discounts for your furry family members
• Financial support in times of hardship with our Achieve Care Fund
• A safe place to connect and a commitment to diversity and inclusion through our six employee resource groups

From the single parent trying to catch up on bills to the entrepreneur needing a loan for the next phase of growth, you’ll get to be a part of their journey to a better financial future. We’re proud to have over 3,000 employees in mostly hybrid and 100% remote roles across the United States with hubs in Arizona, California, and Texas. We are strategically growing our teams with more remote, work-from-home opportunities every day to better serve our members. A career at Achieve is more than a job-it’s a place where you can make a true impact, have a sense of belonging, establish a fulfilling career, and put your well-being first.