Head of Information Security

Etix • Morrisville, NC

2d • Hybrid

About The Position

Etix is seeking a hands-on information security leader to strengthen and mature security practices across its ticketing and ecommerce platforms. The role works closely with Engineering, IT, Product, Legal, and executive leadership to identify security risks, establish practical safeguards, and improve the company’s overall security posture. The successful candidate will combine technical security expertise with independent risk assessment, practical implementation, initiative leadership, and cross-functional coordination. The position offers ownership of a growing security program and the opportunity to influence technical decisions and establish scalable security practices within an established international technology company.

The position follows a hybrid schedule: employees are generally expected to work in the office four days per week, with one flexible remote day per week. The role focuses on securing modern web applications and cloud infrastructure, prioritizing meaningful risks, and working directly with technical teams to implement improvements. Etix values practical experience, judgment, technical competence, and measurable security improvements.

Requirements

• At least 5 years of progressive experience in information security, application security, security engineering, or a related field.
• Experience implementing or improving security practices in a SaaS, ecommerce, fintech, or comparable technology environment.
• Strong working knowledge of web application, API, and cloud infrastructure security; AWS is preferred.
• Practical understanding of secure software development lifecycle (SDLC) practices.
• Practical understanding of vulnerability identification, management, and remediation.
• Practical understanding of identity and access management (IAM).
• Practical understanding of encryption and data protection fundamentals.
• Working knowledge of PCI-DSS requirements and payment security practices.
• Experience collaborating with technical teams to identify and address security vulnerabilities.
• Ability to communicate security risks and recommendations to technical and nontechnical stakeholders.
• Ability to assess security risks, prioritize improvements, and work collaboratively with Engineering and IT to implement practical solutions.
• Ability to balance security best practices with operational realities and reduce risk without unnecessarily disrupting business operations.
• Comfort taking initiative, working independently, and coordinating security activities across multiple departments.
• Experience implementing or improving security processes, controls, or programs with measurable results.

Nice To Haves

• Experience in high-transaction environments with elevated fraud or security risks, such as fintech, ticketing, ecommerce, or payments.
• Experience working with globally distributed engineering teams.
• Experience supporting PCI-DSS assessments, SOC 2 readiness, or comparable compliance initiatives.
• Familiarity with data privacy regulations and frameworks, including GDPR and the Data Privacy Framework.
• Experience developing incident response procedures, conducting security assessments, or managing security-related projects.
• Security certifications such as CISSP, CISM, CCSP, or comparable credentials.
• Previous experience leading security initiatives, mentoring technical staff, or coordinating cross-functional security efforts.

Responsibilities

• Assess existing security practices and identify opportunities to strengthen Etix’s overall security posture.
• Develop and maintain a prioritized security improvement plan aligned with business needs and available resources.
• Establish practical security policies, procedures, and controls with internal stakeholders.
• Define and track security metrics and provide regular updates on risks, progress, and recommended improvements.
• Evaluate security tools and technologies for threat detection, vulnerability management, and operational efficiency.
• Work with Engineering and IT to identify and address risks in applications, APIs, and infrastructure.
• Support secure software development practices, including code security reviews, vulnerability scanning, and remediation processes.
• Collaborate with technical teams to strengthen cloud security, network controls, identity and access management, and monitoring.
• Participate in architectural and technical reviews and recommend appropriate safeguards.
• Establish repeatable, automated security processes that reduce manual effort and operational risk.
• Coordinate security improvements across U.S. and international development teams.
• Partner with Legal, Product, Engineering, and IT to improve data protection practices, including data classification, access controls, encryption, and retention.
• Support applicable privacy and data protection requirements by identifying and implementing appropriate technical controls.
• Coordinate PCI-DSS activities, including readiness assessments, documentation, remediation, and collaboration with external assessors.
• Support customer and partner security assessments, questionnaires, and compliance-related requests.
• Assist in evaluating readiness for additional security frameworks, such as SOC 2, as business needs evolve.
• Develop, document, and coordinate practical incident response procedures with Engineering, IT, and executive leadership.
• Help establish processes for identifying, reporting, investigating, and resolving security incidents.
• Maintain a security risk register and work with internal teams to prioritize remediation based on business impact.
• Coordinate periodic security assessments, vulnerability reviews, and follow-up remediation.
• Serve as a primary point of contact for internal security questions, customer security reviews, and third-party assessments.
• Recommend improvements based on security incidents, assessments, and emerging risks.

Benefits

• Competitive medical, dental, and vision coverage options for eligible team members and family members, including domestic partners.
• Flexible Spending Accounts (FSA), Limited Purpose Flexible Spending Accounts (LPFSA), Health Savings Accounts (HSA), and Dependent Care Flexible Spending Accounts (DCFSA).
• Company-paid life insurance, AD&D insurance, short-term disability, long-term disability, and workers’ compensation for eligible team members.
• Optional additional life insurance and AD&D coverage for employees and their spouses or children.
• 401(k) retirement savings plan with Fidelity Investments, including financial planning and budgeting counseling.
• Paid Time Off and paid company holidays.
• Parental leave for new mothers and fathers.
• Everyday casual dress code; business casual attire preferred on-site or with clients.
• Branded apparel for client-facing team members.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed