Director, Information Security & Compliance

Salary: $98,000 - 165,000 per year
Requirements:
We require a bachelors degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience. We require CISSP, CISM, or an equivalent security certification. We require at least 6 years of experience in cybersecurity and/or information security. We are looking for hands-on experience implementing and maintaining NIST 800-53 controls, including familiarity with the moderate baseline. We expect demonstrated ownership of SOC 2 Type II audits, including coordination, evidence gathering, and remediation. We value experience developing system security plans, managing enterprise cybersecurity programs in complex IT environments, and securing AWS and Windows-based application environments. We prefer experience implementing GRC platforms such as Vanta or Drata. We seek a proven track record of building, maturing, or substantially improving a security function. We need someone comfortable operating as a player-coach, balancing executive strategy with hands-on technical execution. We require the ability to pass an FBI background investigation and hold U.S. citizenship upon hire.
Responsibilities:
We will have you develop, own, and carry out our information security strategy and multi-year roadmap. You will lead our SOC 2 audit program from scoping through evidence collection, auditor coordination, control validation, and remediation. You will manage our NIST 800-53 program and keep us aligned with the applicable baseline and any client-specific overlays. You will maintain our CJIS Security Policy compliance and act as the senior point of contact for state and federal CJI compliance matters. You will define, track, and present security KPIs, risk status, and program progress to executive leadership. You will maintain our security policy set, including access control, incident response, vulnerability management, vendor risk, change management, and data handling. You will lead vulnerability management, penetration testing, threat modeling, and security reviews for cloud and on-premises customer deployments. You will own incident response planning, tabletop exercises, live response coordination, post-incident reviews, and required notifications. You will define and oversee our security tooling strategy in partnership with Infrastructure and DevOps. You will conduct security reviews of architecture, third-party integrations, and procurement to ensure our products and operations are secure by design. You will partner with Engineering and DevOps on secure SDLC practices, code and dependency scanning, secrets management, and developer security enablement. You will own client-facing security materials, including questionnaires, RFP responses, attestations, and our trust narrative. You will stay current on emerging threats, compliance changes, and justice-sector security expectations, translating them into practical internal improvements. You will recruit, develop, and lead our information security team as the function expands.
Technologies:
AWS Cloud DevOps Matrix Security Windows Architect
More:
We are Matrix Pointe Software, a fast-growing, entrepreneurial software company based in Cleveland that builds enterprise solutions for federal, state, and local government agencies across the justice system, including prosecutors offices, law enforcement agencies, administrative bodies, and civil law departments. We focus on connecting justice partners, improving workflows, and delivering better outcomes through robust technology platforms. This is a hybrid remote role based in Cleveland, Ohio, and we offer a competitive benefits package that includes 401(k) and matching, health, dental, and vision insurance, HSA, paid time off, parental leave, professional development assistance, retirement plan, and tuition reimbursement.
last updated 30 week of 2026