Directive

Lead and build a lifecycle marketing practice including strategy, client delivery, team mentorship, and sales support. | 6+ years in lifecycle marketing or CRM with hands-on marketing automation and ability to architect lifecycle programs from scratch. | Directive Consulting is the leading B2B performance marketing agency that delivers real revenue—not just leads. We use Customer Generation (a marketing methodology developed by us) to cut through the noise. Forget MQLs—we’re here to drive pipeline, fuel SQLs, and scale brands that are serious about growth. From Paid Media and SEO to CRO, RevOps, and Go-To-Market Strategy, we build marketing engines that win in SaaS and across B2B industries. We move fast. We think boldly. We are elite. We hire people who challenge the status quo and push campaigns past what’s expected - sparking demand for bold, innovative brands. If you live for performance, love solving hard problems, and want your work to actually mean something, you’ll fit right in. But here’s the fun part—we don’t just deliver results; we’re shaping the future of marketing. Ready to build something that breaks the mold? The Role Directive is building a dedicated Lifecycle Marketing practice designed to help clients turn more of the demand they already generate into pipeline, revenue, repeat purchases, expansion, and long-term customer value. We are looking for an Associate Director of Lifecycle Marketing to help build that offering from the ground up. This is a player-coach role from day one. You will be hands-on with strategy, platform architecture, client delivery, and execution while also helping define how Directive approaches Lifecycle Marketing as a practice. As the offering grows, you will help hire, mentor, and develop the team around you while continuing to stay close to our most strategic and complex client work. You will have significant autonomy to shape the practice, including our methodology, service offerings, delivery model, technology recommendations, measurement frameworks, and how we bring Lifecycle Marketing to market. You will work closely with the Director and Managing Director, who will provide strategic direction, support, and partnership while giving you room to build. This is not a role for someone looking to inherit a finished playbook. We have a strong starting point, but we are looking for someone with the experience and point of view to challenge it, improve it, and help us create something meaningfully differentiated. The Clients You'll Support Our Lifecycle Marketing practice supports two fundamentally different revenue models. You need to be able to operate across both and teach others how to do the same. eCommerce Direct Commerce Retention: Distributors, manufacturers, and other businesses with a direct purchasing relationship and trackable order history. Channel & Partner Enablement Lifecycle: Manufacturers selling through distributors, dealers, resellers, or other channel partners. In these environments, the lifecycle audience may be the channel partner rather than the end buyer. Service & SaaS Lead Nurture & Pipeline Acceleration: Our Service and SaaS clients generate handraisers across paid media, organic, events, content, and other acquisition channels. Lifecycle Marketing helps turn those handraisers into qualified opportunities and customers in partnership with the client's sales and BDR teams. Customer Expansion & Subscription Growth: Once a prospect becomes a customer, Lifecycle Marketing can help deepen that relationship. What You'll Do Lifecycle Strategy & Architecture: You will help establish how Directive approaches Lifecycle Marketing across both eCommerce and Service/SaaS clients. Build lifecycle strategies rooted in the client's revenue model, customer journey, data, and business objectives. Architect end-to-end customer and prospect journeys across acquisition, nurture, conversion, onboarding, retention, expansion, and re-engagement. Develop segmentation strategies using demographic, firmographic, behavioral, purchase, engagement, lifecycle-stage, and account data. Identify gaps in existing lifecycle programs and prioritize the highest-impact opportunities. Build testing roadmaps across messaging, timing, audience, journey structure, offers, and conversion points. Establish measurement frameworks that connect lifecycle activity to meaningful business outcomes. Hands-On Client Delivery You will be expected to build alongside the team and act not only as a strategy-only leader. Platforms & Technology You will work across client technology stacks rather than operating within a single platform. Client Leadership As a senior member of the practice, you will own relationships, not simply deliver assigned tasks. Build the Lifecycle Marketing Practice A meaningful part of this role is building the offering itself. You will have the autonomy to influence as you begin with shared early-stage frameworks, not rigid rules. We expect you to finish what is incomplete, improve what can be better, and introduce new approaches when your experience tells you there is a stronger way to solve the problem. Sales, Scoping & Growth As a foundational leader of the offering, you will also help Directive determine where Lifecycle Marketing can create value before an engagement begins. Over time, you will become one of the people Directive's Sales and Client teams turn to when they need to understand what a strong Lifecycle Marketing engagement should look like. What We're Looking For Player-Coach Leadership. Initially, time will be spent building and directly delivering client work. As revenue and headcount grow, responsibilities will increasingly include developing the people around you. 6+ years of experience across Lifecycle Marketing, CRM, marketing automation, retention, or related disciplines. Meaningful experience supporting B2B, SaaS, Service, or complex eCommerce business models. A purely traditional DTC background is unlikely to be enough for this role. Hands-on experience architecting lifecycle programs from scratch rather than only optimizing established programs. Strong understanding of segmentation, automation, customer journeys, trigger logic, experimentation, and lifecycle measurement. Working expertise in at least two major lifecycle or marketing automation platforms such as HubSpot, Salesforce Marketing Cloud, Pardot, Klaviyo, Marketo, or Attentive. Experience working with imperfect data and creating practical strategies despite technical limitations. Strong client-facing communication and the ability to confidently lead conversations with senior stakeholders. Experience connecting lifecycle activity to pipeline, revenue, retention, expansion, or other meaningful business outcomes. Previous experience mentoring, managing, or informally developing other marketers. Ability to move between strategy and execution without seeing hands-on work as "below" the role. Strong commercial instincts and comfort participating in scoping, pitching, or expanding client engagements. Comfort operating in ambiguity and creating structure where little exists today. A strong point of view paired with a willingness to change that point of view when the data or client context calls for it. Strong Plus Agency or consulting experience managing multiple clients simultaneously. Experience supporting both eCommerce and B2B/SaaS lifecycle programs. Experience with manufacturer, distributor, dealer, reseller, or other channel-driven revenue models. Experience with ERP environments such as SAP, Oracle, NetSuite, Epicor, or Infor and their relationship to customer and marketing data. Experience with SMS strategy, technology evaluation, implementation, and optimization. Experience partnering closely with RevOps, Sales Operations, or Marketing Operations teams. Experience auditing lifecycle programs and translating findings into paid consulting engagements. Previous responsibility for scoping, pitching, or selling professional services. Experience helping build a new capability, department, or service offering. Platform certifications across HubSpot, Salesforce, Salesforce Marketing Cloud, Klaviyo, or comparable technologies. What We Offer Compensation for this role includes a competitive base salary. The annual base salary range for this position based in the United States is $100,000- $120,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents (US, CAD, MX) Benefits to Support the Whole Person: 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace 💪 Physical - Physical therapy through Omada, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave 💰 Financial - Traditional and Roth 401(k) with a 3% company match 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time 🌴 Annual Company-wide Retreat Work Environment Requirements As a remote-first company, you’ll have the ability to work from your home office. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, Mexico, and the UK. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to recruiting@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise-wide cybersecurity strategy, risk management, compliance, and incident response for a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and compliance frameworks, and relevant certifications. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise-wide cybersecurity strategy, risk management, compliance, and incident response for a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud environments, security frameworks, and executive communication skills. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity strategy, risk management, compliance, and incident response for a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and SaaS environments, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature the company's cybersecurity program, manage risk assessments, oversee compliance, and drive security culture across a fully remote workforce. | 7+ years cybersecurity experience, 3+ years leading security teams, expertise in risk assessments, cloud and SaaS environments, security frameworks, incident response, and strong executive communication. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity strategy, risk management, compliance, and incident response for a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature the company's cybersecurity program, manage risk and compliance, oversee security operations and incident response, and promote security awareness across a fully remote workforce. | 7+ years in cybersecurity with 3+ years leading security programs, strong knowledge of cloud and SaaS environments, experience with security frameworks and incident response, and preferred certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity strategy, risk management, compliance, and incident response for a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security teams, strong knowledge of cloud and security frameworks, excellent executive communication, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise-wide cybersecurity strategy, risk management, compliance, and incident response for a fully remote organization. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications (CISM preferred). | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise-wide cybersecurity strategy, risk management, compliance, and incident response for a fully remote organization. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $175,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity programs, manage risk and compliance, and oversee security operations and incident response. | 7+ years cybersecurity experience with 3+ years leading security teams, knowledge of cloud and security frameworks, and strong executive communication skills. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity program, manage risk and compliance, oversee incident response, and promote security culture in a fully remote environment. | 7+ years cybersecurity experience with 3+ years leading security teams, expertise in risk assessments, cloud SaaS environments, security frameworks, and strong executive communication. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature the company's cybersecurity program, manage risk, compliance, incident response, and security culture across a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity programs, manage risk and compliance, oversee incident response, and promote security culture across a fully remote organization. | 7+ years cybersecurity experience with 3+ years leading security teams, strong knowledge of cloud and security frameworks, excellent communication skills, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise-wide cybersecurity strategy, risk management, compliance, and incident response for a fully remote organization. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise-wide cybersecurity strategy, risk management, compliance, and incident response for a fully remote organization. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity strategy, risk management, compliance, and incident response for a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity strategy, risk management, compliance, and incident response for a fully remote workforce. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, and relevant certifications. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise cybersecurity program, manage risk and compliance, oversee incident response, and promote security culture in a fully remote environment. | 7+ years cybersecurity experience with 3+ years leading security programs, strong knowledge of cloud and security frameworks, executive communication skills, and relevant certifications like CISM. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lead and mature enterprise-wide cybersecurity strategy and programs for a fully remote organization. | 7+ years cybersecurity experience with 3+ years leading security teams, strong knowledge of cloud and security frameworks, and relevant certifications. | Director Of IT Security — Job Description Directive Consulting is the leading B2B marketing agency for brands that are serious about the metrics that matter most. With over a decade of expertise and 420+ B2B brands under our belt, we've earned our reputation on real outcomes. We run through 3 divisions: Performance, Communications, and Commerce, all wired to share intelligence and answer to revenue. We move fast. We think boldly. We hire people who challenge the status quo, build campaigns worth talking about, and make bold brands impossible to ignore. The Role This role reports to the Head of Finance and is responsible for leading Directive's information security strategy across our fully remote workforce operating in the United States, Canada, Mexico and the United Kingdom. As the Director of IT Security, you will establish and continuously mature our cybersecurity program, protecting our people, client data, business operations and technology ecosystem from evolving cyber threats. You will proactively identify and mitigate cyber risks, strengthen our security posture, oversee compliance initiatives and prepare the organization to respond effectively to evolving threats. You will work closely with our leadership team to ensure security is embedded into every aspect of our business while enabling continued growth and innovation. Roles & Responsibilities Cybersecurity Strategy And Governance • Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. Risk Management And Threat Assessments • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Configure and enforce data governance policies across distributed tools (Notion, Drive, Stratos) to prevent data silos. • Manage device security policies using MDM software (Kandji) to protect company assets. Security Operations & Incident Response • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. Compliance & Client Security • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. Security Awareness & Culture • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity. What You Offer /Qualifications • 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred. What Success Looks Like • Develop and execute a scalable cybersecurity roadmap that measurably improves Directive's overall security posture. • Complete enterprise-wide risk and threat assessments, resulting in prioritized remediation plans for critical vulnerabilities. • Maintain successful SOC 2 compliance and establish audit readiness across all security controls and documentation. • Reduce organizational cybersecurity risk through stronger identity management, endpoint protection, and security governance. • Build a proactive security awareness program that significantly reduces phishing susceptibility and increases employee security engagement. • Establish measurable security KPIs and provide regular executive reporting on risks, trends, and program maturity. • Create a resilient incident response and disaster recovery program that enables the business to respond confidently to security events with minimal operational disruption. • Become a trusted strategic partner to executive leadership by balancing strong security practices with business agility and growth. Benefits • 🏠 We have a set living wage at Directive; The annual base salary range for this position based in Canada is $150,000- $190,000 USD. This salary range is an estimate, and the actual salary may vary based on Directive's compensation practices, job related skills, and depth of experience. • 🙏 Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Benefits to Support the Whole Person: • 🧠 Mental - Access to certified therapists through Spring Health, membership to Headspace • 💪 Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • 🛫 Time Off - Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • 💰 Financial - Traditional and Roth 401(k) with a 3% company match • 🌟 Bonus - Annual bonus based on tenure, which scales in total amount over time Work Environment Requirements As a remote-first company, you’ll have the ability to work from anywhere in the US, with the option to enjoy our state-of-the-art offices in Irvine, California. For some positions, as posted, we will accommodate global opportunities where we have established businesses, including Canada, the UK, and Australia. For global locations, you must have established and current work authorization and permanently reside in that country. This role has the opportunity to operate 100% virtually from your home office. We primarily collaborate with our colleagues through virtual meetings (Zoom), and Slack. In this role, you will be required to operate a laptop computer (PC or Mac available), computer software platforms, and other office productivity tools as necessary. Due to the nature of this role, you must be able to remain stationary for extended periods, must be able to observe and interpret written and/or verbal communication, must have reliable internet access, and a professional background. To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions. If you require reasonable accommodations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, direct your inquiries to careers@directiveconsulting.com. Additional Information At Directive, one of our core values is People First. We’re committed to fostering a more diverse and inclusive culture in the digital landscape. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.