$190,000–$230,000 Per Year
Alliance/Partner Marketing, Artificial Intelligence (AI), Auditing, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Cloud Computing, Committee of Sponsoring Organizations of the Treadway Commission (COSO), Computer Security, Contract Negotiation, Control Objectives for Information and related Technology (COBIT), Cross-Functional, Disaster Recovery, Enterprise Protection, HIPAA (Health Insurance Portability and Accountability Act), Healthcare, ISO (International Organization for Standardization), IT Governance, Incident Response, Industry Standards, Information Technology/Systems Audit, Information/Data Security (InfoSec), Internal Audit, International Electro-Technical Commission (IEC), Internet Security, Leadership, Legal, Management Strategy, Policy Development, Privacy Controls, Regulatory Compliance, Request for Proposals (RFP), Risk Analysis, Risk Management, Security Architecture, Security Auditing, Security Monitoring, Software Engineering, Software as a Service (SaaS), Staff Policies, Supplier Relationship Management (SRM), Systems Maintenance, U.S. National Institute of Standards and Technology (NIST), Vendor/Supplier Management, Vendor/Supplier Relations
Piper Companies is seeking an experienced Senior Director, Information Security (Security Officer) to lead and evolve the organization's overall cybersecurity and risk management strategy within a fast-paced, growth-oriented environment. This role is instrumental in safeguarding enterprise systems, applications, and sensitive data while working cross-functionally with executive leadership, legal, and technology teams. The position will influence security posture, guide policy development, and serve as a trusted advisor on data protection and privacy matters. This is a full-time opportunity with a preference for candidates located in Chapel Hill, NC or Newton, MA.
Responsibilities for the Senior Director, Information Security include:
- Collaborating with infrastructure and engineering teams to design and implement a robust enterprise security and IT risk management program.
- Leading organization-wide risk assessments and partnering with business units to proactively address vulnerabilities and compliance gaps.
- Acting as a key advisor for clients, prospects, and internal teams on security and data privacy topics, including participation in audits, RFPs, and implementation discussions.
- Overseeing relationships with third-party providers responsible for security audits, certifications, and compliance assessments (e.g., SOC 2, HITRUST).
- Establishing and testing business continuity and disaster recovery capabilities to maintain system uptime and data protection.
- Driving initiatives related to ongoing security monitoring, vulnerability remediation, and threat detection.
- Promoting a culture of security awareness and ensuring employees adhere to policies, procedures, and training requirements.
Qualifications for the Senior Director, Information Security include:
- 8+ years of progressive experience across cybersecurity, risk management, compliance, and IT within a high-growth or dynamic organization.
- Strong familiarity with industry-standard frameworks such as SOC, NIST, ISO, and HIPAA/HITRUST.
- Demonstrated success building and scaling security programs, particularly in regulated industries such as healthcare or SaaS.
- Relevant industry certifications such as CISSP, CISM, or similar.
- Experience managing vendor relationships, including contract negotiation and oversight of managed services.
- Knowledge of internal audit practices, IT general controls (ITGC), and governance frameworks such as COSO or COBIT.
- Exposure to AI security principles and governance models (e.g., NIST AI RMF, OWASP Top 10 for LLMs, ISO/IEC 42001), including assessing emerging risks in modern SaaS or healthcare environments.
Compensation for the Senior Director, Information Security includes:
- Salary range: $190,000 - $230,000 + bonus
- Comprehensive benefits package including Medical, Dental, Vision, 401k, PTO, holidays, and sick leave as required by law.
Keywords: Information security, cybersecurity strategy, risk management, IT governance, security frameworks, NIST, ISO, SOC 2, HIPAA, HITRUST, compliance, data privacy, cloud security, vulnerability management, threat intelligence, incident response, business continuity, disaster recovery, security operations, third-party risk management, vendor management, audit and certification, IT general controls, ITGC, policy development, security architecture, software engineering security integration, enterprise security programs, regulatory compliance, healthcare security, SaaS security, executive leadership, cross-functional collaboration, customer security engagement, AI security, data protection, and governance frameworks
#LI-BH1
#HYBRID
This job is open for applications on 6/12/2026 and will remain open for at least 30 days from the posting date.