Director of Security

Job description

Etix is seeking a Director of Security to build and lead our security program. This is a hands-on leadership role responsible for defining security strategy, strengthening application and infrastructure security, formalizing data governance practices, and ensuring we stay ahead of industry standards. This role will have broad cross-functional authority and executive visibility. You will partner closely with Engineering (U.S. and China teams), Product, Infrastructure/IT, Legal, and Executive Leadership to ensure security is embedded in how we design, build, and operate our platform. This position will report to the CEO. Work Location & Flexibility We operate on a hybrid schedule where employees are generally expected to work from the office four days a week, with one flexible remote day per week. Who We’re Looking For This role will strengthen how we design systems, protect customer data, and build trust with partners and clients. The Director of Security will have direct influence on product architecture, infrastructure design, and company-wide risk management. You’ve built and evolved security programs and can point to measurable improvements in risk posture, incident response, or compliance maturity. You can assess ambiguity, identify real risk, prioritize effectively, and drive pragmatic solutions end-to-end across engineering, infrastructure, and leadership. You communicate complex security concepts clearly to both technical teams and executive stakeholders, translating risk into business impact and actionable decisions. You balance rigor with practicality, embedding security into workflows without paralyzing teams, and know when to enforce standards and when to guide through influence. Experience Required 8+ years in security engineering, application security, or related fields Experience building or leading security programs in a SaaS, ecommerce, fintech, or high-transaction environment Strong hands-on experience securing web applications, APIs, and cloud infrastructure (AWS/Azure/GCP) Deep understanding of: Secure SDLC practices Vulnerability management Identity and access management Encryption and key management Experience owning or supporting PCI-DSS and similar frameworks Proven ability to influence cross-functional teams without direct authority Strong executive communication skills Preferred Experience in high-transaction ecosystems with elevated fraud risk (fintech, ticketing, ecommerce, payments) Experience working with globally distributed engineering teams Experience leading SOC 2 or comparable framework implementation Security certifications (CISSP, CISM, OSCP, etc.) Experience building and scaling security teams Responsibilities Security Strategy & Program Leadership Lead security as a strategic differentiator aligned with enterprise trust and long-term revenue growth. Assess and elevate Etix’s overall security practices. Define and execute a multi-year security roadmap aligned with company growth. Establish clear security KPIs and provide executive-level visibility into risk. Evaluate and leverage emerging technologies, including AI-driven security tools, to improve threat detection, vulnerability management, and operational efficiency. Application & Infrastructure Security Strengthen application and infrastructure security, with a goal of minimizing security-related downtime. Design security controls and workflows that prioritize automation and continuous enforcement, reducing reliance on manual processes and minimizing operational risk. Embed secure SDLC practices, threat modeling, and vulnerability management into engineering workflows. Strengthen cloud, network, IAM, and monitoring practices in partnership with DevOps and IT. Ensure security is built into architectural decisions across U.S. and international development teams. Data Governance & Compliance Define data classification, handling, encryption, and retention standards. Ensure compliance with global data privacy regulations and cross-border data transfer frameworks (e.g., GDPR, Data Privacy Framework). Own and continuously improve PCI-DSS posture. Evaluate and prepare for additional frameworks (e.g., SOC 2) as business needs evolve. Incident Response & Risk Management Develop and lead incident response processes and post-incident reviews. Maintain a risk register and prioritize mitigation efforts based on business impact. Serve as the primary security contact for audits, RFP responses, customer reviews, and third-party assessments Benefits Healthcare: Etix offers competitive medical, dental, and vision coverage options for Etix team members and their eligible family members, including domestic partners. Healthcare Financial Savings: Etix offers Flexible Spending Accounts (FSA), Limited Purpose Flexible Spending Accounts (LPFSA), Health Savings Accounts (HSA), and Dependent Care Flexible Spending Accounts (DCFSA) in conjunction with our healthcare offerings. Financial Protection: Life insurance, AD&D insurance, short-term disability, long-term disability and workers’ compensation are offered for eligible team members and paid by the company. Optional additional Life Insurance and AD&D may be purchased to cover an employee, spouse, and/or child(ren). Retirement Planning: Etix offers a 401k retirement savings plan with Fidelity Investments. Included in this program is financial planning and budgeting counseling. Vacations & Holidays: Everyone needs some time off from work to take care of personal business, enjoy a well-earned vacation, or just unwind from the demands of everyday life. At Etix, we offer Paid Time Off benefits in addition to paid company holidays. Parental Leave: Parental Leave is available to new Mothers and Fathers to help assist team members welcome a new child to their family. Work Attire Program: Etix offers an every day casual dress code. While on-site or with clients, business casual attire is preferred. Etix offers branded apparel for client facing team members. Other Information No sponsorship or H1B situations can be accommodated Relocation is not available for this position Etix is an international, web-based ticketing provider serving entertainment, sports, fairs, and live events across 40+ countries and processing over 50 million tickets annually. As the largest independent ticketing company in North America, we support 2,000+ venues with flexible ticketing, integrated marketing, and e-commerce solutions, and have served customers for over 25 years. Learn more at .