Director of Information Security and Compliance (Remote - United States)

ETR
401(k)
United States, California, Sacramento
333 University Avenue (Show on map)
Jan 07, 2025
HOW YOU CAN CONTRIBUTE The Director of Information Security and Compliance will be responsible for designing, implementing, and maintaining ETR's information security and compliance programs. Reporting directly to the COO, this role is critical for ensuring that all internal IT systems, digital products, and client-facing operations meet regulatory and security standards, including SOC2, HIPAA, FERPA, and NIST 800-171/800-53. The Director will work collaboratively with cross-functional teams, including product development, web development, IT infrastructure, business development, sales, and marketing, to maintain security and compliance best practices. This role also involves managing external relationships with third-party tool providers, auditors, and consultants, as well as responding to customer inquiries regarding the organization's compliance posture. The Director is responsible for guiding the final stages of the compliance program, with a strong focus on documenting policies, procedures, processes, and evidence. This position works remotely and can be located anywhere in the United States. CULTURAL ATTRIBUTES You possess excellent communication and relationship-building skills with colleagues, partners and clients with utmost integrity, courtesy and diplomacy. You are capable of embracing the ideas of others and seek to understand others' points of view to further our shared mission and vision. You enjoy working independently as well as collaboratively to meet goals and deadlines. You are capable of using technology to effectively and professionally communicate with co-located and remote colleagues. You are self-motivated and capable of strategically prioritizing multiple tasks in a fast-moving environment. You embrace a spirit of learning and curiosity in your work and proactively seek out answers and solutions to questions and challenges that arise. WHAT YOU'LL NEED TO BE SUCCESSFUL Education & Experience: Bachelor's degree in information security, IT management, or a related field is required. A minimum of 7 years of experience in IT security and compliance, with a focus on SOC2, HIPAA, FERPA, and NIST frameworks. Experience in K-12 education technology or government contracting preferred. Strong background in managing security tools, including Vanta, AWS, Microsoft 365, and observability platforms like Datadog. Proven experience collaborating across multiple departments and managing external auditors and compliance engagements. Skills & Knowledge: Deep understanding of regulatory frameworks including SOC2, HIPAA, FERPA, and NIST CSF/800-171/800-53. Experience using and managing GRC applications (e.g., Vanta) and security tools in cloud environments (AWS, Microsoft 365, Azure). Proven ability to manage third-party vendor relationships and external audits. Strong skills in policy development, risk assessment, and compliance reporting. Highly developed people skills; ability to work with diverse groups of people. Ability to work independently and take initiative while maintaining strong collaboration across departments. Excellent written and verbal communication skills, with the ability to present complex security concepts to technical and non-technical stakeholders. Strong organizational skills and the ability to handle multiple priorities in a fast-paced environment. Dexterity with the unknown and the ability to rapidly learn. Proven leadership of cross-functional teams and vendor management. Strategic planning experience, particularly in building product roadmaps and aligning with business needs. Ability to influence stakeholders, manage budgets (including government-funded projects), and execute through cross-functional agile teams. Strong analytical, organizational, communication, and problem-solving skills. Understanding of scalable digital products, content management, SaaS, and B2B service delivery. Capable of leading complex projects from inception to completion, with a demonstrated ability to motivate teams. Willingness to travel (5-10%). The use of a personal vehicle or rental car for ETR business will require a valid driver's license and proof of insurance. Location: Remote - United States. Starting Pay Range: $136,400 to $166,700 annually. The typical hiring range for this position is $136,400 to $151,500 at 100% FTE. The starting salary is determined based on the candidate's knowledge, skills, and experience. WORKING AT ETR ETR employees enjoy a competitive salary, amazing 401(k) and health benefits as well as generous PTO and holiday pay. You will contribute to making a difference in the world! Apply for this position << return to the careers page About ETR WHO WE ARE ETR (Education, Training and Research) is a national non-profit. We are passionate about our mission, which is to improve health and increase opportunities for youth, families and communities. We seek to promote equity and justice through first understanding, and then addressing, the ways health and education outcomes are influenced by the complex interactions between people and their environment. As an organization with a focus on mission-driven impact, we value diversity and inclusion of different perspectives and ideas. We emphasize collaboration and continuous learning, both within the organization and in our partnerships. We are looking for people who share our passion for health equity, social justice and learning. ETR is an equal opportunity employer and supports a vision where all staff - regardless of race, ethnicity, sexual orientation, gender identity, age, socioeconomic background, or religious affiliation - feel there is space for a diversity of experiences to be represented, respected and valued. THE IMPACT WE ARE LOOKING TO MAKE We envision a world where all people have the information, skills and opportunities to lead healthy lives. We endeavor to reduce disparities and increase equity in health and education. We are committed to uplifting and supporting our partners to do work across the country and around the globe in four main areas: HIV, sexual, and reproductive health (HIV/SRH) Equity and inclusion in Science, Technology, Engineering, and Math (STEM) fields Alcohol, tobacco, and other drugs School-based health and wellness We realize our vision and achieve our mission by linking innovation and research to practice. We drive the science through program development, applied research and evaluation. We scale innovation through capacity building and dissemination. WORKING AT ETR ETR has a distributed workforce across three co-located offices in California, as well as individual employees located around the nation. ETR employees enjoy a competitive salary, an amazing 401(K) and robust health benefits, as well as generous PTO and holiday pay. We offer remote working flexibility when possible. Join us. You will work with inspiring colleagues and contribute to making a difference in the world! ETR is proud to be an Equal Opportunity Employer EEO and AA Employer/VET/Disabled ETR is an equal opportunity employer and supports a vision where all staff - regardless of race, ethnicity, sexual orientation, gender identity, age, socio-economic background, or religious affiliation - feel there is space for a diversity of experiences to be represented, respected and valued.