Director, Corporate Security

About the role:

The Director, Security and Compliance will be responsible for the strategic leadership of the security and compliance program at Nintex. The security leader will establish, maintain, enhance, and grow comprehensive security strategies, policies, and procedures to ensure the integrity, confidentiality and availability of intellectual property and assets are protected. The Director will be responsible for proactively identifying, assessing, and reporting on security risks that meets regulatory requirements and supports the risk posture of the Nintex.

Your contribution will be:

• Information Security
• Establish near and long-term internal security and compliance goals, define security strategies, metrics, reporting mechanisms and program services; and create a roadmap for continual security and compliance growth.
• Lead the design, implementation, and protection of security controls, processes, and technologies to protect the organization’s intellectual property and assets.
• Actively engage in a threat management and intelligence program in collaboration with an outsourced Security Operations Center (SOC).
• Provide regular and consistent reporting on the current status of the information security program to senior business leaders.
• Manage security incidents and breaches, including incident response, investigation, and remediation efforts.
• Maintain, shape, and grow up-to-date information security policies, standards and guidelines.
• Learn, investigate, and examine new security technologies that can strengthen and provide depth to Nintex’s security posture.
• Risk Management and Compliance
• Establish and maintain the BC/DR program throughout Nintex.
• Enhance and facilitate the information security risk assessment process, including the reporting and oversight of treatment efforts to address findings.
• Work closely with internal stakeholders and external auditors and consultants on ISO and SOC audits.
• Lead efforts to internally assess, evaluate and make recommendations to management regarding the adequacy of the security controls for the information technology systems.
• Lead, enhance, and evolve the Crisis Response Team, including annual Disaster Recovery testing and tabletop exercises.
• Security Education
• Enhance and deliver security awareness and training programs to educate employees on best practices and promote a security-conscious culture.
• Monitor the external threat environment for emerging threats and advises relevant stakeholders on the appropriate courses of action.
• Product Security
• In collaboration with Product and Engineering leaders and develop processes and implement tooling to integrate security into Product which includes threat modeling, cloud security posture, and other security protections.
• Establish a red and blue team exercise with product to focus on emerging and trending cyberattacks.
• Leadership
• Manage, hire, and grow security engineers and compliance analysts.
• Collaborate with cross-functional teams, including IT, legal, compliance, and product, and R&D, to implement security policies and awareness.
• Partner with Infrastructure and Support team to deliver on security initiatives and create a roadmap and plan for future security initiatives.
• Partner with internal key stakeholders to assess our posture, build controls, and mitigate security risks.
• Establish and maintain relationships with external vendors, partners, and industry peers to stay informed about security trends and leverage external expertise.
• Establish and grow an environment for emerging threats and advises relevant stakeholders on the appropriate courses of action.

What’s in it for you?

• Nintex has a hybrid working model, enabling us to build culture, learn, and grow together. We intentionally connect and collaborate, while emphasizing flexibility with a blend of at-home and in-office work.
• While our offerings differ from country to country, we offer our entire global workforce an array of exciting perks and benefits, including
• Global Gratitude and Recharge Days
• Flexible, paid time off policy
• Employee wellness programs and counseling resources
• Meaningful peer recognition and awards
• Paid parental leave
• Invention/patenting assistance
• Community impact, paid volunteer time, and opportunities
• Intercultural learning and celebration
• Multiple tools through which to learn and grow, and an incredible global community
• View more about our benefits here: here.

Target Compensation Range (US ONLY):

$205,000 – $220,000 USD annually.

E-Verify Participation:

Nintex participates in E-Verify for work authorization.

Equal Employment Opportunity:

We are an Equal Employment Opportunity Organization.