Director of Security Architecture & Engineering, EverCommerce

• At least 10 years of relevant work experience in a technical field (e.g. cybersecurity, software development, or systems administration), with at least 10 years people leadership experience, and at least 5 years people leadership experience specifically in security
• Bachelor's Degree in a technical discipline such as Cyber Security, Information Technology, Computer Science, or Information Systems - or equivalent professional experience
• Have at least one current Industry recognized security certifications; CISSP, CISM, CISA, GIAC or commensurate experience
• Excellent communication and interpersonal leadership skills, with the ability to communicate and collaborate effectively with cross-functional teams, matrixed organizations, and technical / and non-technical stakeholders
• Detail Oriented team player with the desire and ability to mentor and onboard new engineers and team members
• Demonstrated experience with the security, development and/or management of systems compliant to NIST 800-53, NIST CSF, or ISO 27001-2022 security control frameworks
• Exceptional knowledge and understanding on the creation/implementation and securing of cloud technologies such AWS and Azure
• Extensive ability to estimate, plan, lead and execute complex technical projects while working independently and/or in a team
• Knowledge of Information Security risk assessment methodologies and standards
• Highly flexible, self-motivated and eager to learn, with a strong passion for cyber security
• Excellent verbal and written English communication skills

Desirable

• We are looking for a Director, Security Architecture & Engineering, Security Architect to help us enable and mature our EverCommerce Security Team and program
• This role also serves as our primary Security Architect in guiding how EverCommerce designs, builds, deploys, integrates, and optimizes security solutions and processes
• We're looking for a strong team leader that is invested in helping their stakeholders and co-workers succeed
• They will have well-developed communication skills and can demonstrate proven technical ability, refined relationship management skills, and problem-solving skills
• We are seeking an individual with a diverse background and that includes aptitude across several technologies, and skill sets
• This role will require close coordination with other information security leaders and teams, security stakeholders and with internal and external software development teams
• Create and maintain security architecture and engineering processes and procedures
• Design of system architectures which meet established cybersecurity requirements and align with customer needs
• This includes security requirements definition, documentation, and communication
• Development of security architecture requirements and implementation guidance based on analysis of NIST 800-53 and or other security control frameworks
• Architect, design, implement, maintain, and operates information system security controls and countermeasures
• Provides techniques and patterns for securing integration with external security system vendors and/or cloud providers
• Leads regular architecture and design reviews to ensure requirements implementation
• Evaluates and plays an active role in life-cycle management of multiple security technologies
• Identify security risks and control gaps within systems, designs, products, data flows, and processes; and recommend corrective architecture, integrations, controls, and operations
• Lead the development of security requirements, architectures, and documentation to ensure security controls are seamlessly integrated into new technology deployments
• Perform secure architecture and design reviews of new technology and security systems deployments, and collaborate with business teams to integrate secure-by-design principles into engineering projects and builds
• Maintain a clear view of the overall security architecture roadmap and strategic plan
• Leverage emerging technologies and advanced security practices to ensure EverCommerce is at the forefront of security for our solution groups and our customers
• Build, maintain and mature security architecture metrics and reporting
• Recruit, hire, train, coach and mentor security engineers and analysts
• Additional duties as required and assigned