Director, IT Security & Compliance

Description: CloudBolt Software () empowers enterprises to automate, govern, and optimize cloud infrastructure at scale. The Director of IT, Security & Compliance serves as the senior leader responsible for corporate IT, security operations, compliance, technology governance, and operational excellence across the organization. You will lead a senior team spanning DevOps and cloud infrastructure, IT and security/compliance, platform engineering/SRE, and documentation. You will partner closely with executive leadership to strengthen security posture, maintain compliance, drive AI-enabled efficiencies, optimize technology investments, and ensure employees have the tools and support needed to be productive and secure. We are a small team that acts quickly the ideal candidate is comfortable developing long-term technology strategy and equally willing to roll up their sleeves when the situation calls for it.

Key Responsibilities: Serve as the organization's primary security leader and trusted advisor, performing many of the responsibilities typically associated with a CISO while partnering with executive leadership on security strategy and execution. Develop, implement, and maintain pragmatic, right-sized security policies, standards, and best practices working with the developers as customers. Manage relationships with external vendors, consultants, and auditors. Lead all Corporate IT functions supporting a fully remote global workforce. Manage identity and access management, endpoint management, collaboration platforms, SaaS applications, and the employee technology lifecycle (onboarding, offboarding, provisioning).Establish scalable IT processes that support employee productivity and business continuity, and drive continuous improvement of IT service delivery and employee experience. Drive pending infrastructure decisions, including VPN strategy, password management, tooling platform consolidation, and certificate lifecycle automation. Partner closely with Engineering and Platform teams to remove technical blockers and improve operational effectiveness, including CI/CD, automation, and cloud platform reliability. Identify opportunities to leverage AI and automation to eliminate manual processes and operational toil across the organization. Evaluate and implement AI-enabled tools that improve productivity, support operations, engineering workflows, security monitoring, and business processes. Establish governance and best practices for responsible AI usage within the company. Partner with the COO and leadership team to manage IT, infrastructure, security, and cloud-related budgets, including AI tooling spend. Monitor and optimize spending across cloud providers, SaaS platforms, security tools, and technology vendors.

Requirements: Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience.10+ years of progressive experience in IT, infrastructure, security, cloud operations, or platform engineering roles.5+ years of leadership experience managing technology functions and cross-functional initiatives. Demonstrated experience leading security and compliance programs (SOC 2 required), incident response activities, and risk management initiatives, with a pragmatic, risk-based approach. Experience managing IT operations for distributed or remote-first organizations. Experience managing technology budgets, vendor relationships, and cloud spend optimization. Exceptional judgment and comfort with ambiguity: you make calls with incomplete information, handle conflict directly and non-emotionally, and get things done without needing follow-up. Ability to balance strategic planning with hands-on technical execution. Preferred

Qualifications: Experience in a SaaS, cloud management, cloud infrastructure, Kubernetes, or DevOps-focused organization. Familiarity with AWS, Azure, Google Cloud, Kubernetes, Terraform, GitHub Actions, or similar technologies. Experience with NIST 800-171, ISO 27001, FedRAMP, or other federal/public-sector compliance frameworks. Security certifications such as CISSP, CISM, or equivalent; cloud certifications from AWS, Azure, or Google Cloud. Experience implementing AI-driven productivity and operational automation solutions. Experience working at a