Senior Director, Security & Compliance

What You’ll Own

Security Strategy & Governance

• Develop and execute inKind’s enterprise security strategy, policies, standards, and operating procedures.
• Lead security planning aligned with company growth, product expansion, and regulatory requirements.
• Set enterprise security policy and standards that the product and engineering organizations build against.
• Serve as a senior advisor to leadership on security, compliance, and risk matters.

Compliance & Audit

• Own the company’s compliance strategy and roadmap.
• Lead audit readiness and certification programs, including SOC 2, PCI DSS, privacy programs, vendor and third-party risk management, and regulatory compliance requirements.
• Partner with Legal and Finance on governance and regulatory obligations.
• Ensure compliance programs remain scalable as the business grows.

Security Operations & Risk Management

• Oversee security operations, monitoring, vulnerability management, incident response, and threat detection.
• Establish company-wide risk management and risk assessment programs.
• Develop security metrics, executive dashboards, and reporting frameworks.
• Lead incident response planning, tabletop exercises, and business continuity initiatives.
• Manage third-party security reviews and vendor risk assessments.

Corporate IT Operations

• Own corporate IT operations, including the internal IT team, endpoint and device management, internal systems, and helpdesk support.
• Manage identity and access administration across corporate systems and SaaS applications.
• Establish IT standards, device lifecycle and asset management, and operational service levels.
• Ensure IT operations support a secure, productive workforce across the company’s office and distributed environments.

Product & Platform Security Partnership

• Partner with Engineering and Product to integrate security into the software development lifecycle and define secure development standards.
• Provide governance, policy, and advisory oversight for cloud (AWS) security architecture and application security (Engineering owns platform implementation).
• Advise on threat modeling, secure architecture reviews, and security testing practices.
• Ensure security requirements are represented throughout the product lifecycle.

Leadership & Organizational Development

• Build and lead a high-performing IT, Security, & Compliance organization.
• Hire, mentor, and develop security, compliance, and IT professionals.
• Establish accountability frameworks and performance metrics.
• Create a culture of security awareness and shared responsibility.

Required Qualifications

• 10+ years of progressive experience in security, compliance, IT, governance, or risk management.
• Experience leading and developing people across security, compliance, or IT, with the depth to operate as a hands-on technical leader.
• Demonstrated success as a hands-on, player-coach leader in a lean or scaling environment — personally executing core security, compliance, and IT work while building the team.
• Proven experience owning compliance programs and audits, including SOC 2 and PCI DSS.
• Experience presenting to executive leadership, auditors, and external stakeholders.
• CISSP, CISM, CRISC, CCSP, or equivalent certifications.

Preferred Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field.
• Experience in fintech, payments, financial services, or regulated industries.
• Experience managing corporate IT and device management platforms (e.g., MDM).
• Experience supporting high-growth startup or scale-up organizations.

Benefits

• Unlimited PTO
• 9 Paid Company Holidays
• 100% Company-Paid Medical and Dental Coverage for Employees
• Vision Coverage Available
• Company-Paid Short-Term Disability
• Child Care Benefits
• Generous Parental Leave
• Professional Development Opportunities
• Daily Catered Lunches and Snacks
• Dining Credit within the inKind Network

Compensation

Base Salary: $185,000 – $215,000 DOE