安全负责人

SECURITY LEAD

开发工程职能支持限定地区（需当地身份）

公司Black Financial Consult

薪资未公开

工作地点United States

地域资格限定地区（需当地身份）

时区要求日间重叠约 9 小时，基本正常作息

用工类型Contractor

发布时间10 天前

数据来源Himalayas

前往 Himalayas 查看并投递 →

注意地域限制：该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者，通常需要当地工作身份才能投递，或需与雇主确认是否接受独立合同（Contractor）形式合作。

这是一个远程职位。

安全负责人负责制定和执行组织的网络安全策略，领导安全架构，管理风险，并确保符合全球安全标准。该职位与工程、DevOps、产品、合规和管理层紧密合作，将安全嵌入技术栈的所有层面。

主要职责

制定并领导企业级网络安全策略和架构。

监督所有系统的应用、基础设施和云安全。

领导威胁建模、风险评估和漏洞管理计划。

建立并执行安全策略、标准和最佳实践。

监控、检测并响应安全事件和泄露。

确保实施安全的软件开发实践（DevSecOps）。

进行安全审计、渗透测试协调和修复跟踪。

与工程和DevOps团队合作，将安全嵌入CI/CD流水线。

确保符合监管和行业标准（例如ISO 27001、PCI-DSS、GDPR）。

领导身份和访问管理（IAM）策略和控制措施。

为云基础设施和架构决策提供安全指导。

指导和培养安全工程师和分析师。

所需资格

8–15年网络安全或信息安全相关经验。

在企业或金融科技环境中领导安全团队的实操经验。

对云安全、应用安全和基础设施安全有深入了解。

具备事件响应、威胁检测和风险管理经验。

对合规框架有深刻理解。

优秀的领导力、沟通能力和利益相关者管理能力。

技术与职能专长

网络安全架构与设计

云安全（AWS、Azure 或 GCP）

身份与访问管理（IAM）

漏洞管理和渗透测试协调

安全软件开发生命周期（SSDLC / DevSecOps）

网络安全和加密协议

安全监控和SIEM工具

事件响应和灾难恢复规划

合规框架（ISO 27001、NIST、PCI-DSS、GDPR）

风险评估和威胁建模

最初发布于 Himalayas

查看英文原文

This is a remote position.

The Security Lead is responsible for defining and executing the organization’s cybersecurity strategy, leading security architecture, managing risk, and ensuring compliance with global security standards. This role works closely with engineering, DevOps, product, compliance, and leadership teams to embed security into all layers of the technology stack.

Key Responsibilities

Define and lead enterprise-wide cybersecurity strategy and architecture.

Oversee application, infrastructure, and cloud security across all systems.

Lead threat modeling, risk assessments, and vulnerability management programs.

Establish and enforce security policies, standards, and best practices.

Monitor, detect, and respond to security incidents and breaches.

Ensure secure software development practices (DevSecOps) are implemented.

Conduct security audits, penetration testing coordination, and remediation tracking.

Collaborate with Engineering and DevOps teams to embed security in CI/CD pipelines.

Ensure compliance with regulatory and industry standards (e.g., ISO 27001, PCI-DSS, GDPR).

Lead identity and access management (IAM) strategies and controls.

Provide security guidance for cloud infrastructure and architecture decisions.

Mentor and develop security engineers and analysts.

Required Qualifications

8–15 years of experience in cybersecurity or information security roles.

Proven experience leading security teams in enterprise or fintech environments.

Strong knowledge of cloud security, application security, and infrastructure security.

Experience with incident response, threat detection, and risk management.

Strong understanding of regulatory compliance frameworks.

Excellent leadership, communication, and stakeholder management skills.

Technical & Functional Expertise

Cybersecurity architecture and design

Cloud security (AWS, Azure, or GCP)

Identity & Access Management (IAM)

Vulnerability management and penetration testing coordination

Secure Software Development Lifecycle (SSDLC / DevSecOps)

Network security and encryption protocols

Security monitoring and SIEM tools

Incident response and disaster recovery planning

Compliance frameworks (ISO 27001, NIST, PCI-DSS, GDPR)

Risk assessment and threat modeling

Originally posted on Himalayas

本页面信息整理自 Himalayas，版权归原发布方所有。职位可能随时关闭，投递请以原始页面为准。本站只做信息聚合展示，不参与招聘流程，也不向求职者收取任何费用。