Director of Information Security & Compliance, Conductor
$150-190k
+ Annual Corporate Bonus of 20% tied to company and individual performance
More information about location
2+ days a week in office
Search & content intelligence platform
Job no longer available
Search & content intelligence platform
201-500 employees
Job no longer available
$150-190k
+ Annual Corporate Bonus of 20% tied to company and individual performance
More information about location
2+ days a week in office
201-500 employees
Company mission
To transform marketing into a force for improving people’s lives.
Role
Who you are
- You have a minimum of 7 years of experience working in Security Engineering and SecOps with at least 2 years leading a security engineering team in a SAAS and modern cloud environment
- Certification in one or more of the following: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar credentials is preferred
- At least 2 years working with 3rd party vendors in leading Security Audits and ISO 27001 Certification renewals
- Strong hands-on experience across cybersecurity domains, such as network security, endpoint security, cloud security, identity and access management, threat intelligence, etc
- Experience working in agile environments, and you value collaboration, feedback and look to continually improve yourself and your work
- Demonstrated ability to establish and maintain effective relationships with employees, partners, and vendors
- Excellent communication skills, capable of engaging technical and non-technical audiences
- Deep knowledge of SIEM, Vulnerability Management, Penetration Testing, IAM, IDS/IPS, advanced encryption at rest techniques, and other security protocols
- Strong analytical and problem-solving skills, with an aptitude for identifying and mitigating risks proactively
- Experience dealing with external entities like auditors and customer
- Significant Experience with Amazon Web Services
- Experience with modern virtualization technologies (Docker, Kubernetes, etc.)
- Hands on Working knowledge and understanding of Intrusion Detection Systems (IDS), Security Information and Event Management (SIEM), and Open Web Application Security Project (OWASP)
- Expertise of current cyber security standards/frameworks; ISO 27001, GDPR, SOC, NIST
- Exposure to security disciplines and in-depth exposure to Incident Response or Detection Engineering
- Ability to manage vendor/supplier relationships, including contract negotiation, ongoing maintenance & support, and problem-resolution
What the job involves
- We are looking for a Director, Information Security to join our team at Conductor reporting to our Chief Financial Officer
- You will lead the information security function across the company to ensure consistent and high-quality information security management in support of our business goals
- The successful candidate will be focused on creating the Security and Compliance Roadmap, being the security point person for our technology teams, compliance, security inquiries, as well as continuing to develop and maintain our automated security tests in our CICD processes
- Develops, implements, and executes a holistic information security program to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy, and recovery of information
- Directly manage a small remote team of security engineers including management of your team’s projects and backlog
- Own and Develop the Information Security and Compliance Roadmap to Drive Infosec Automation and Security Maturity best practices (incl, Red Team/Blue Team Strategies)
- Participate in design reviews with product management and feature teams discussions to enhance security best practices during development
- Collaborate with our technology teams to identify business-critical systems and remediate vulnerabilities
- Provide strategic guidance and direction on compliance initiatives, ensuring adherence to relevant regulations such as CCPA, GDPR, FDA guidelines, and other global data protection laws
- Develops and oversees effective disaster recovery policies and standards to align with the enterprise business continuity management (BCM) program goals,
- Own technical security questionnaires, security policy reviews, configuration standards, third-party audits, Security process automation and tooling. Represent the Company in discussions with stakeholders on matters related to information security and compliance
- Deploy and analyze security-related tools and metrics (e.g. intrusion detection, log management, encryption, endpoint protection)
- Lead incident response and management activities to promptly detect, contain, and mitigate cybersecurity incidents, minimizing the impact on operations and preserving stakeholder trust
- Lead all activities required by internal and external audit schedules
- Consistently ensure that business is conducted with integrity at all times and that behavior aligns with Conductor's policies, procedures, and values
Our take
The internet is increasingly becoming a walled garden, with content and vital market intelligence hidden away on social media sites, gaming environments and apps. And with increasing regulation in the data protection space, such as GDPR, it can be harder for marketing teams to gain insight into what potential customers exist and what they want.
Conductor exists to change that. Taking advantage of the power of search ("No one ever lies to a search engine", in the words of the company's CEO and co-founder), it utilises data from search traffic to help marketing teams build more effective campaigns. Able to help optimise search results, track keyword rankings and measure performance, it has led to doubling the rate of conversions and site traffic among its customer base, which includes the likes of Citibank, athenahealth and Canon.
With a record of substantial funding and growing revenue from its customer base, Conductor is continuing to invest in its technology, making strategic acquisitions to help it expand. For instance, its acquisition of ContentKing allowed it to add real-time website auditing and monitoring to its platform, and its 2023 acquisition of Searchmetrics is aimed at accelerating its growth in Europe. As the SEO space enters a period of consolidation, it seems that Conductor is well-positioned to remain at the top of the search results.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
Nov 2021
$150m
LATE VC
Oct 2017
$7m
SERIES D
Total funding: $216.6m
Company benefits
- Child Care & Parental Leave Benefits
- Health Insurance & Wellness Benefits
- Perks & Discounts
- Professional Development Benefits
- Retirement and Stock Option Benefits
- Vacation & Time Off Benefits
Company HQ
Midtown South, New York, NY
Leadership
Seth Besmertnik
(Co-Founder & CEO)Previously CEO of LinkExperts (market leader in link building for Fortune 500 brands).
Jeremy Duboys
(Founder)With a BA in Media Studies, they went onto become a Founder for many companies such as Professional Taste Printing, Prinly/All Business Cards and most recently RxGo.com/Medication Discount Card LLC.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job