Director of Security, Compliance, & IT, BigTime Software
$160-200k
More information about location
3+ days a week in office
Real-time insight for professional services
Be an early applicant
Real-time insight for professional services
101-200 employees
Be an early applicant
$160-200k
More information about location
3+ days a week in office
101-200 employees
Company mission
To be the engine behind the greatest professional services firms on the planet.
Role
Who you are
- 10+ years of experience across IT, security, DevOps, compliance, and privacy
- CISSP or similar certification preferred
- Strong expertise with Windows-based infrastructure
- Strong expertise in SOC 2, GDPR compliance, NIST, cloud security best practices
- Incident response and root cause analysis expertise
- Experience with AWS security, IAM governance, infrastructure-as-code (Terraform, CDK), and security automation in a primarily Windows environment
- Availability for on-call/off-hours support for critical incidents and system maintenance
- Strategic Decision Making; The ability to develop a long-term vision and plan for the organization, and to make decisions that align with that vision
- The ability to make tough decisions, often with limited information and in complex situations, and to consider the potential impact of those decisions on the organization
- Staying focused on goals
- Innovation & Change Management; The ability to anticipate and navigate change within the organization, and to lead others through transitions
- Strong understanding of need for change in high-growth environment
- The ability to think creatively and to foster a culture of innovation within the organization
- Willingness to think outside of the box and try new strategies
- Communication; The ability to communicate effectively with all stakeholders, both verbally and in writing
- Ability to adapt communication style to different audiences
- Ability to deliver compelling executive-level presentations, including board level presentations, story telling through the utilization of business and data insights
- Emotional Intelligence; The ability to understand and manage one's own emotions and those of others
- Ability to use that understanding to build strong relationships and influence others
- The ability to empathetically give feedback and execute Radical Candor as needed
- Team Building & Leadership; The ability to build and lead high-performing teams
- Ability to develop and coach team members to reach their full potential
- The ability to create an environment of collaboration and support on the team and foster a sense of safety
- Service leadership skills
- Sharing power, putting the needs of others first and helping people develop and perform as highly as possible
- Operational Acumen; Making data-driven decisions
- The ability to establish KPIs effectively
- Tying operations to numbers
- Objectively evaluate team performance using healthy metrics
- The ability to understand and manage financial resources effectively and to make sound financial decisions for the organization
What the job involves
- The Director of Security, Compliance and IT, is responsible for overseeing and executing Security, Compliance, and Privacy initiatives across globally distributed teams
- This role is highly technical and hands-on, requiring deep expertise in security governance, privacy and risk management, and incident response, while also leading strategic planning (30%) to standardize policies, improve operational maturity, and ensure compliance with regulatory frameworks
- The ideal candidate will be an “AI first” leader – staying updated on emerging technologies and identifying opportunities to integrate and accelerate whenever possible for efficiency gains, while ensuring responsible AI governance and compliance frameworks for internal use and within all of our products
- This role is hands-on in a primarily Windows environment
- A typical day may include responding to security requests from external stakeholders, collaborating with IT and DevOps on strengthening security controls in our corporate network, updating IAM policies, coordinating penetration testing with vendors, or managing our vulnerability management program
- This position requires off-hours support for critical incidents and system maintenance as needed
- Oversee and enforce AWS security best practices (EC2, ECS, AppRunner, IAM, VPC) and security best practices across our corporate network
- Manage system engineers handling IT helpdesk, endpoint security, Okta, Google Apps, Slack, and other corporate IT operations
- Lead all security incidents and investigations, conducting root cause analysis (RCA) and remediation
- Develop and enforce security policies, IAM governance, and vulnerability management strategies
- Maintain and oversee multiple compliance initiatives (SOC 1 and 2), ensuring adherence across globally distributed teams
- Risk management
- Own third-party risk management, conducting vendor security reviews
- Maintain a risk register and conduct risk assessments
- Dictate security governance policies across multiple departments to standardize compliance
- Manage third-party penetration testing and remediation of findings across all products
- Collaborate with DevOps and IT to maintain recovery plans to minimize system downtime and data loss
- Help ensure compliance with GDPR, CCPA, DPF and other regulations
- Complete privacy assessments and implement risk mitigation strategies
- Align IT strategies with BigTime’s corporate priorities through collaboration with stakeholders
- Serve as the primary contact for client security reviews, RFPs, assist contract reviews
- Assist Sales and Customer Success in closing enterprise deals by addressing client security concerns
- Negotiate vendor contracts for a variety of services
- Work with Engineering to secure applications and deployments while maintaining compliance
- Manage and mentor IT staff to foster a high-performing team, finding efficiencies via AI whenever possible. You “walk the walk” and “talk the talk” with AI acceleration
- Implement and manage AI-driven technology solutions to enhance operational efficiency
- Ensure compliance with industry regulations, including AI governance frameworks
- Mentor and oversee team handling IT, Security, Compliance and while also assisting with a significant portion of the hands-on work. Collaborate with the development team on securing and bringing DevOps initiatives into production
- Manage responsibilities across AWS, security, compliance audits, privacy initiatives, IT escalations, and DevOps with limited additional resources
Our take
Time is a valuable asset for any business, but recording and invoicing it manually can prove cumbersome, especially at scale. This is the reason why many companies turn to professional service automation (PSA) tools, such as that offered by BigTime Software.
The company offers a cloud-based suite of practice management tools that allows professional services – from accountants to architects – to track, manage and invoice their time. The platform also provides services in other areas, such as allowing companies to schedule employees and manage their projects.
In 2022, BigTime Software acquired Projector, a leader in the PSA space, combining Projector's functionality with BigTime's scale of operation. It has also now acquired WorkRails, which stenghtens its CPQ and workflow automation capabilities. Both these moves showcase the company's determination to expand its value to remain a strong force in the market.
Freddie
Company Specialist at Welcome to the Jungle
Insights
4% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Jan 2022
$100m
GROWTH EQUITY VC
May 2019
$14m
SERIES B
Total funding: $116.7m
Company benefits
- Opportunities for Advancement
- Generous Time Off & Holidays
- 401(k) Savings Plan + Match
- Ongoing Training & Learning
- Wellness Benefits
- Paid Parental Leave
- Weekly Lunch Stipend
- Company Paid Health, Dental, & Vision
- Hybrid/Flexible Work Environment
- Company Outings & Team Offsites
Company HQ
Chicago Loop, Chicago, IL
Leadership
Brian Saunders
(Founder & Executive Chair)Former CEO of the company. Previously CEO of DaVinci Software, a strategy and consulting firm that focused on internet-based products and services.
Don India
(CEO)Member of the Board of Directors at RadarFirst, where they were CEO for 3.5 years. Formerly CRO at RDC, and held several roles including VP at IBM.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at BigTime Software