SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Checkmarx, an AI-powered application security platform trusted by 1,600+ customers across 70+ countries, is seeking a Strategic Director of IT & Information Security. This is a Director-level leadership role with full accountability for a significant IT and security budget, a global team, and the systems, projects, and controls that keep the company running securely at scale.
You will own the delivery of IT services and infrastructure projects company-wide, while directing the design, implementation, and continuous improvement of the corporate security program—including security systems, threat modeling, and offensive security testing. You will report directly to the CIO/CISO and partner closely with the Directors of GRC and DevSecOps to ensure IT, security, compliance, and product security efforts are aligned, resourced, and mutually reinforcing.
Key responsibilities include:
- Own the global IT & Security strategy, P&L, budgets, roadmap, and operating model, balancing reliable day-to-day operations with modernization, automation, and digital transformation.
- Lead the global IT organization and core technology services, including infrastructure, networks, systems, service desk, end-user computing, IAM, and collaboration platforms; establish SLAs/KPIs and drive service quality, efficiency, and employee experience.
- Lead major technology programs and transformations, including infrastructure modernization, migrations, workplace technology, M&A integrations, and other cross-functional initiatives, ensuring delivery on scope, time, and budget.
- Build and scale a high-performing global IT organization while managing strategic vendors, contracts, commercial negotiations, and technology costs.
- Lead corporate security operations and strategy across endpoint, network, email, identity, SIEM/SOC, vulnerability management, cloud environments, security architecture, and security awareness.
- Own security risk and testing programs, including threat modeling, penetration testing, red-team engagements, vulnerability remediation, and security monitoring.
- Lead security incident response and crisis management, including detection, containment, root-cause analysis, post-incident reviews, business continuity, and disaster recovery.
- Partner with GRC and DevSecOps leadership to align IT and security operations with enterprise risk, compliance, and application security requirements, including SOC 2, ISO 27001, and GDPR.
- Provide executive and Board/Audit Committee visibility into IT and security posture, risks, budgets, and strategic priorities, and lead IT & Security due diligence for M&A, partnerships, and major vendors.
Requirements: Not explicitly stated in the provided posting text.
