Director of Information Security

Daxko - Birmingham, AL

Full-time - Senior

Remote - Birmingham, AL

Professional, Scientific, and Technical Services

About the position

As the Director of Information Security at Daxko, you will oversee and ensure the integrity, confidentiality, and availability of all data and information systems. This role requires strategic leadership, exceptional analytical skills, and a deep understanding of cybersecurity threats and countermeasures. You will lead the information security team in protecting the company's digital assets, ensuring compliance with security regulations and standards, and preparing the team to address both current and future security needs.

Responsibilities

• Oversee and ensure the integrity, confidentiality, and availability of all data and information systems.
• Lead the information security team in protecting digital assets and ensuring compliance with security regulations.
• Develop and implement comprehensive information security strategies and policies that align with business objectives.
• Coordinate with technical operations and software development departments to ensure security is integrated throughout the software development life cycle.
• Manage security incidents and events to protect corporate IT assets, including intellectual property and regulated data.
• Conduct risk assessments, security audits, and coordinate remediation plans.
• Collaborate with other departments to maintain a consistent security posture across all platforms and systems.
• Manage the development and implementation of IT security education and awareness programs.
• Stay current with the latest security threats, technologies, and trends that may impact information security.
• Serve as the primary point of contact for external auditors and agencies on all information security matters.
• Advise senior management on security direction and resource investments.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 8 years of experience in risk management, information security, and technical operations.
• Minimum of 10 years of experience in software engineering and architectural roles.
• At least 5 years in a senior leadership role.
• Experience with incident response management and information security frameworks (ISO 27001, NIST, etc.).
• Strong understanding of the cybersecurity landscape, including emerging threats and effective countermeasures.
• Proven work experience as a System Security Engineer or Information Security Engineer.
• Hands-on experience in firewalls, intrusion detection systems, anti-virus software, and authentication systems.
• Experience with network security and networking technologies.
• Familiarity with compliance standards such as PCI-DSS, SOC 1, SOC 2, GDPR.

Nice-to-haves

• Master's degree preferred.
• Hands-on experience addressing application security issues with industry best practices.
• CISSP: Certified Information Systems Security Professional.
• CISM: Certified Information Security Manager.
• CEH: Certified Ethical Hacker.
• CompTIA Security+.

Benefits

• Dental insurance
• Paid time off
• Vision insurance
• 401(k) matching
• Gym membership
• Sabbatical