Director of Security
Senior security leader who owns Vectra AI's enterprise information security program: setting security strategy, managing risk and compliance (SOC 2, ISO 27001, GDPR), leading incident-response readiness and tabletop exercises, and overseeing IT operations, while reporting findings to executives and the board.
- Compensation
- $208.7K–$245.6K / yr
- Location
- San Jose, California, United States
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Not specified
- Posted
Skills
Must have
- 12+ years of progressive experience in information security
- 5+ years in a senior leadership role
- Demonstrated success building and leading enterprise security programs in a US or global organization
- Hands-on knowledge of security architectures for cloud and hybrid environments
- Familiarity with IT operations (networks, infrastructure, support) and ability to oversee these areas
- Strong understanding of US regulatory environment and industry standards
- Excellent leadership, communication, and stakeholder-management skills, including board-level reporting
Nice to have
- Professional certifications such as CISSP, CISM, CCISO, CISA or equivalent
Full description
Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises.
The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in a single platform. Powered by patented Attack Signal Intelligence, it empowers security teams to rapidly prioritize, investigate and respond to the most advanced cyber-attacks. With 35 patents in AI-driven threat detection and the most vendor references in MITRE D3FEND, organizations worldwide rely on the Vectra AI to move at the speed and scale of hybrid attackers. For more information, visit www.vectra.ai.
Role Summary:
We are seeking an experienced and forward-thinking security leader to own our enterprise information security program and oversee the protection of our data, systems, and infrastructure. This leader will set strategy, manage risk, and ensure compliance with applicable regulations while partnering with business and technology teams. The role also includes oversight of IT operations and support where required.
Key Responsibilities
- Develop and execute a comprehensive, enterprise-wide information security strategy aligned to business goals.
- Establish and maintain policies, standards, and controls for data protection, network security, endpoint security, cloud security, and incident response.
- Lead and mentor a high-performing security team and collaborate with engineering, IT, legal, HR, and other functions.
- Conduct ongoing risk assessments, vulnerability management, and penetration testing; tabletop exercises to evaluate readiness for real-world attack scenarios; present findings to senior leadership and the board.
- Drive compliance with US and international frameworks and regulations (SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, etc.).
- Manage security aspects of third-party/vendor relationships.
- Act as primary contact for regulators, auditors, and key customers on security matters.
- Serve as an executive spokesperson for security and privacy issues internally and externally.
Qualifications
- 12+ years of progressive experience in information security, with at least 5+ years in a senior leadership role.
- Demonstrated success building and leading enterprise security programs in a US or global organization.
- Hands-on knowledge of security architectures for cloud and hybrid environments.
- Familiarity with IT operations (networks, infrastructure, support) and ability to oversee these areas.
- Strong understanding of US regulatory environment and industry standards.