Director of Information Security & Compliance

ViaPath Technologies • Dallas, TX

1d • Hybrid

About The Position

The Director, Information Security & Compliance leads ViaPath’s information security, vulnerability management, and compliance evidence programs. Reporting to the Senior Vice President, Enterprise Information Systems, this role combines strategic leadership and people management with direct technical and compliance engagement across cloud, infrastructure, application, container, and database environments.

The Director leads a team of security professionals and cross-functional initiatives, partnering with Enterprise Information Systems, Product, Legal and Compliance, Operations, and Engineering to embed security into enterprise architecture, product development, cloud operations, and public-sector compliance programs. A key focus is leading FedRAMP and GovRAMP initiatives, including security planning, control implementation, authorization support, continuous monitoring, remediation, evidence development, and audit readiness. The Director is expected to remain technically engaged while translating security and compliance requirements into executable programs and driving initiatives through completion.

This is a hybrid position based at ViaPath’s office in Dallas, Texas.

Requirements

• 12+ years of progressive experience in cybersecurity, information security, cloud security, vulnerability management, compliance, security engineering, IT risk, or related disciplines.
• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience.
• CISSP, CISM, CISA, or equivalent certification.
• Hands-on experience implementing FedRAMP or GovRAMP compliance projects, including technical control implementation and project leadership through readiness, assessment, authorization, and/or continuous monitoring.
• Strong working knowledge of NIST Special Publications, FedRAMP, GovRAMP, continuous monitoring, POA&M management, vulnerability remediation, evidence collection, control validation, and audit readiness.
• Experience implementing and operating vulnerability, configuration, and compliance scanning across servers, containers, container registries, databases, web applications, cloud services, and infrastructure components.
• Experience with cloud security, security architecture, identity and access management, data protection, DevSecOps, and security controls across hybrid or multi-cloud environments.
• Ability to identify and assess security risks, develop practical remediation strategies, and drive remediation efforts through completion.
• Strong project and program management skills, with the ability to manage multiple complex security and compliance initiatives simultaneously.
• Ability to communicate effectively with executive leadership while working directly with engineers, operations teams, auditors, assessors, and other technical and business stakeholders.

Nice To Haves

• Experience in government, telecommunications, financial services, or another highly regulated industry.
• Experience supporting organizations that provide technology products or services to government or public-sector customers.
• Experience with multiple security and compliance frameworks, including ISO 27001, PCI DSS, SOC 2, and SOX ITGC.
• Experience securing complex hybrid and multi-cloud technology environments.

Responsibilities

• Lead the development and execution of information security initiatives aligned with Enterprise Information Systems, product, compliance, and business objectives.
• Establish, implement, and validate security architecture standards and controls across hybrid and distributed environments.
• Integrate security requirements and practices into the software development life cycle, infrastructure, cloud operations, and product lifecycle processes.
• Advance security architecture and capabilities, including zero trust, cloud security posture management, DevSecOps, identity and access management, data protection, and encryption.
• Partner with technical teams to evaluate and implement secure integrations across enterprise and cloud environments.
• Drive continuous improvement in cybersecurity posture through automation, security metrics, process improvement, and tooling optimization.
• Translate information security strategy into actionable programs, technical requirements, remediation plans, milestones, and measurable outcomes.
• Lead FedRAMP, GovRAMP, NIST SP 800-53, ISO 27001, PCI DSS, SOC 2, SOX ITGC, and related security and compliance initiatives.
• Lead FedRAMP or GovRAMP projects through readiness, assessment, authorization, and continuous monitoring, including control mapping and implementation, SSP development, POA&M management, assessment coordination, remediation, and status reporting.
• Develop, maintain, and operationalize security policies, standards, procedures, control narratives, technical implementation documentation, and compliance evidence.
• Establish governance and documentation practices that support regulatory, customer, authorization, and enterprise audit requirements.
• Partner with Legal and Compliance, Product, and other stakeholders to address regulatory, contractual, customer, and security requirements.
• Support business continuity and disaster recovery programs to ensure alignment with information security and operational risk requirements.
• Provide executive-level reporting on security posture, compliance readiness, control gaps, remediation status, and material risk exposure.
• Lead and continuously improve vulnerability management, configuration assessment, and compliance scanning programs for servers, containers, container images, registries, web applications, databases, cloud infrastructure, and supporting network infrastructure.
• Oversee security operations activities, including security monitoring, vulnerability management, remediation tracking, control validation, incident response support, and evidence collection.
• Assess cloud security posture and configurations using CSPM, CIEM, vulnerability management, compliance scanning, and infrastructure-as-code review practices.
• Partner with Engineering, Infrastructure, DevOps, Product, and Operations teams to prioritize and remediate vulnerabilities, misconfigurations, insecure defaults, non-compliant baselines, and security coverage gaps.
• Establish processes and metrics to monitor vulnerability remediation, security control effectiveness, exceptions, and recurring security risks.
• Ensure security operations and vulnerability management activities produce documentation and audit-ready evidence to support FedRAMP, GovRAMP, continuous monitoring, customer assurance, and other compliance requirements.
• Support incident response activities and ensure appropriate coordination, documentation, remediation, and lessons learned.
• Lead, develop, and provide direction to security managers, engineers, analysts, compliance professionals, and other security team members.
• Establish team priorities, performance expectations, development goals, and accountability for security and compliance deliverables.
• Maintain active technical and compliance engagement while providing strategic direction and leadership to the security function.
• Lead cross-functional security and compliance initiatives with defined objectives, milestones, ownership, dependencies, risks, and completion criteria.
• Coordinate internal teams, vendors, auditors, assessors, and business stakeholders to drive security and compliance initiatives through completion.
• Communicate complex security, compliance, and risk matters effectively to technical teams, business stakeholders, and executive leadership.
• Promote a culture of security awareness, ownership, and accountability throughout the organization.
• Directly lead security personnel and provide leadership and direction to cross-functional project teams, vendors, consultants, auditors, and assessors supporting information security and compliance initiatives.

Benefits

• Medical, dental, and vision insurance with multiple plan options.
• Health Savings Accounts and Flexible Spending Accounts, including an employer-provided HSA contribution for eligible medical plans.
• Flexible Time Off, including vacation and sick time.
• Company holidays.
• Traditional and Roth 401(k) options with employer matching contributions.
• Company-paid basic life insurance and short-term disability, with additional voluntary coverage available.
• Employee Assistance Program offering free, confidential support for personal, financial, and family matters.
• Additional well-being resources, including access to Care.com, Calm, Active&Fit, Telavet, LegalShield, and other lifestyle resources and discounted services.

What This Job Offers

• Job Type: Full-time
• Career Level: Director