Director of IT, Information Security & Data Privacy

Energage • Exton, PA

1d • $175,000 - $185,000 • Remote

About The Position

Energage is seeking a hands-on, strategic, and operationally strong Director of Information Security & Data Privacy to lead and mature the company's cybersecurity, information security, data privacy, governance, risk, and compliance programs. This leader will be responsible for protecting the company's information assets, maintaining customer trust, ensuring compliance with regulatory and industry standards, and enabling secure business growth in a fast-paced, high-growth SaaS environment. This role requires balancing strategic leadership with day-to-day operational execution while partnering closely with Product, Engineering, IT Operations, Legal, HR, and executive leadership. Reporting to the Chief Operating Officer (COO), this role will lead the company's Information Security, Data Privacy, Governance, Risk, and Compliance (GRC) functions while partnering closely with the IT Operations to ensure secure, reliable, and compliant technology operations.

Requirements

• 10+ years of progressive Information Security, Cybersecurity, and Data Privacy leadership experience.
• 5+ years of director-level or senior leadership responsibility.
• Proven experience leading Information Security and Data Privacy programs within a fast-paced, high-growth SaaS or cloud-native organization.
• Strong hands-on technical expertise in: Cloud security (AWS and/or Azure), Identity and Access Management (IAM), Security operations, Vulnerability management, Endpoint security, Security monitoring and incident response.
• Demonstrated success building, mentoring, and leading high-performing technical teams.
• Deep knowledge of cybersecurity frameworks, risk management, privacy regulations, and security best practices.
• Proven success achieving, maintaining, and continuously improving ISO 27001, SOC 2, and similar compliance and certification programs.
• Experience implementing and managing modern security technologies in cloud-based environments.
• Strong project management, organizational, communication, and cross-functional leadership skills.

Nice To Haves

• Experience supporting hybrid and remote work environments.
• Experience collaborating with Product and Engineering organizations to embed security into cloud-native application development.
• Familiarity with modern SaaS technology ecosystems and cloud security platforms.
• CISSP, CISM, CRISC, or comparable industry certifications.
• Experience supporting mergers and acquisitions, organizational scaling, or rapid business growth.
• Experience developing governance for emerging technologies, including AI.

Responsibilities

• Develop, implement, and continuously improve the company's Information Security strategy, roadmap, and security posture.
• Lead security operations, including: Identity and Access Management (IAM), Endpoint security, Vulnerability management, Threat detection and monitoring, Incident response, Security operations and continuous improvement.
• Partner closely with Product and Engineering teams to integrate security into cloud infrastructure, applications, and the software development lifecycle.
• Develop, maintain, and enhance security policies, standards, procedures, and technical controls aligned with industry best practices.
• Lead the company's security awareness and education program.
• Support customer, partner, and enterprise security assessments and due diligence activities.
• Manage vendor security reviews, third-party risk assessments, customer security questionnaires, and remediation activities.
• Own and continuously evolve the company's Data Privacy and Governance program.
• Ensure compliance with applicable regulations and frameworks, including: ISO 27001, SOC 2, GDPR, CCPA, Other applicable privacy and security regulations.
• Partner with IT Operations, Legal, HR, Product, Engineering, and business leaders to operationalize security and privacy requirements.
• Lead internal and external audits and maintain ongoing certification programs.
• Develop, maintain, and govern privacy policies, standards, procedures, and compliance documentation.
• Monitor evolving privacy regulations and recommend appropriate organizational changes.
• Lead enterprise cybersecurity risk assessments and risk management activities.
• Develop security metrics, KPIs, dashboards, and executive reporting.
• Report security posture, compliance status, and enterprise risks to executive leadership.
• Lead third-party risk management and vendor security governance.
• Evaluate emerging technologies, cybersecurity threats, and AI-related risks.
• Establish governance processes that support secure business growth while balancing operational efficiency.
• Serve as the company's trusted advisor on cybersecurity, privacy, compliance, and technology risk.
• Build strong partnerships across Product, Engineering, IT Operations, Legal, HR, and other business functions.
• Lead, mentor, and develop a high-performing Information Security and Data Privacy team.
• Build scalable security, governance, and compliance processes appropriate for a rapidly growing SaaS organization.
• Balance strategic planning with hands-on execution, remaining actively engaged in operational priorities when needed.
• Foster a collaborative, pragmatic, and solutions-oriented culture that enables business innovation while managing risk.

Benefits

• PTO policy includes company holidays, sick time, vacation time, and floating holidays
• Company pays a portion of individual health care premium
• Option to participate in a company-sponsored 401(k)
• Training and education
• Professional development; all employees have access to a third party professional coach
• Tuition reimbursement program
• Opportunity to work for a purpose-driven organization using business as a force for good

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed