Director of Cyber Security

Senior Director, Security Operations & Platform Engineering (Confidential Search)ABOUT THE OPPORTUNITYRamp Talent is partnering with a well-established, multi-brand online learning company with a high-volume e-commerce business. The company is hiring a Senior Director to own how software is built, shipped, and protected across its portfolio.This leader will run two organizations: an established Security Operations and Information Security function, and a Platform Engineering and Developer Experience (DevEx) organization that you will build from the ground up. The goal is to give every engineer a secure, self-service, AI-augmented path to production on AWS.We're looking for a hands-on, AI-first technology executive who has protected high-volume e-commerce environments, built a platform team around a clear North Star, and scaled strong organizations through great people leadership.WHAT YOU'LL DOSecurity Operations & Information SecurityBuild and lead SecOps: 24x7 detection and response, threat intelligence, vulnerability management, and incident command with clear SLAs and runbooksOwn the information security program, including risk management, policy, security architecture reviews, and audit readiness for PCI DSS, SOC 2, and privacy regulations (CCPA, GLBA, HIPAA)Secure the e-commerce and payments surface: checkout, identity and account takeover, fraud and bot mitigation, WAF/edge protection, and vendor riskDrive Zero Trust access, least-privilege identity controls, and company-wide secrets managementApply AI to security operations (automated triage, AI-assisted detection engineering, agentic response) and set guardrails for safe use of AI and LLMs across the businessPlatform Engineering & Developer ExperienceDefine the Platform North Star and DevEx metrics (DORA, lead time, change failure rate, MTTR, developer satisfaction) and hold the org accountable to themBuild an Internal Developer Platform with golden paths, self-service environments, and Terraform-based infrastructure-as-code so teams go from idea to production in hours, not weeksOwn CI/CD, observability, and SRE practices (SLOs, blameless post-mortems) across AWS workloads (ECS, Lambda, RDS, event-driven services)Embed DevSecOps into the platform (scanning, SBOM, policy-as-code, secret detection) so the secure path is the default pathPartner with FinOps to make cloud cost efficiency a first-class platform outcomeLeadershipChampion an AI-first engineering operating model: AI-assisted coding, testing, incident resolution, and platform automationHire and develop managers and senior ICs across SecOps, Platform, SRE, and DevExOwn budgets, vendor and tooling strategy, and ROI-driven investment casesReport risk posture and platform health to executives and the board, and partner closely with Product, Data, and engineering leadersWHAT YOU BRINGRequired15+ years in engineering, infrastructure, or security7+ years leading multi-team organizations, including managers of managers and 30+ engineersA track record running SecOps / InfoSec for a high-traffic e-commerce or digital commerce business, including PCI DSS and SOC 2 programsProven success building a platform engineering or DevEx team from the ground up, with measurable gains in delivery speed and reliabilityDeep AWS expertise across security (IAM, GuardDuty, Security Hub, KMS, WAF), networking, containers, and serverlessAn AI-first mindset: you use AI tools daily and have embedded AI into security and engineering workflows at scalePreferredExperience in EdTech, multi-brand, or regulated industries (financial services, healthcare)CISSP, CISM, or AWS Security Specialty certificationHOW YOU OPERATEStrong technologist: credible with principal engineers; can review architecture, threat models, and IaC and make sound calls under pressureBuilder and operator: balances strategy with execution and runs calm, decisive incident responsePeople leader: attracts and grows talent and builds accountable teams where security and DevEx are shared responsibilitiesExecutive communicator: translates technical risk and platform investment into clear business outcomesWHAT SUCCESS LOOKS LIKE IN YEAR ONEA measurable security posture baseline, reduced mean time to detect and respond, and clean PCI and SOC 2 auditsA published Platform North Star with golden paths adopted by most product teams and improved DORA metricsA fully staffed, engaged leadership bench across SecOps and Platform, with AI embedded in daily operationsThis is a confidential search. The company name will be shared with qualified candidates after an initial conversation with Ramp Talent. All inquiries are handled with discretion.