At PitchBook we work to provide global professionals with comprehensive data on the entire venture capital, private equity and M&A landscape so they can discover and execute opportunities with confidence. We credit our success and rapid growth to our cutting-edge products, customer centered attitude and ability to embrace and drive change.
In just over a decade, PitchBook has reached over 1,300 global employees with offices worldwide, and we’re not slowing down! Consistently recognized as a Best Place to Work, our culture is at the heart of our success and is driven by excellence, inclusion and fun. At PitchBook we’re committed to fostering an open and collaborative work environment.
About the role:
As the Director of Cyber Security in PitchBook’s engineering division, you will lead the overall security vision, strategy and execution for PitchBook’s suite of products and data platforms in support of key business objectives. You and your cybersecurity team will work with engineers, management and over a thousand global employees to protect PitchBook data assets and information systems from the growing global threat landscape while providing cyber risk management for PitchBook’s mission and customers.
You will provide leadership to Cybersecurity Engineering and Cybersecurity Analysis teams to build and mature key security capabilities, including threat management, vulnerability management, data security management and information security governance risk and compliance programs in a customer-forward high-growth environment that will require adaptive nimble implementations and forward-thinking strategic planning.
Your dual mission will be to bring the certainty of a world-class preventative security program and the assurance of a thorough and prepared incident response system. Your direct and indirect impact will be felt broadly and you will foster a ‘secure culture’ that raises the awareness of the modern threat landscape across the organization and educates each individual on their role in managing cyber risk. You will be responsible for aligning PitchBook from top to bottom with the corporate security mission.
Your ability to collaborate with colleagues, provide leadership in a matrix-style structure, level up engineers and development managers through automation, reliability services, and support, and enable efficient usage of our cloud platform across hundreds of engineers globally will be critical to your success. You will solicit feedback, engage others with empathy, and help create a culture of belonging, teamwork and purpose.
Primary Job Responsibilities:

• Owns cybersecurity engineering and analysis operations, strategies, standards and practices across the organization, working closely with engineering leadership, product management and business risk management to craft roadmaps and success criteria
• Devises technology systems that advance protections from cyber risks, builds adaptive response and recovery processes for cyber incidents and supports engineering excellence across the organization, in portability, usability, maintainability, scalability, recoverability, availability, extensibility and security
• Creates, evangelizes, and organizes PitchBook’s DevSecOps culture, integrating security seamlessly into product, engineering, and operations through structure, collaboration, enablement and automation
• Aligns PitchBook information security and cyber risk programs with the organization’s overall mission and corporate compliance requirements
• Provides security assurance and due diligence for PitchBook management, PitchBook customers and third party stakeholders
• Leads cybersecurity engineering and cybersecurity analysis including, threat management, vulnerability management, data security management, cyber security incident response and information security governance risk and compliance
• Drives learning and adoption of new standards in cloud security practices, application security practices and secure software development lifecycle

Skills and Qualifications:

• M.S. in Computer Science, Software Engineering, or related 
• 7+ years in an architect or senior Security Engineering, Security Operations, Security Analysis, Cloud Security, Application Security, or DevSecOps, roles within a medium or large enterprise
• 3+ years in a leadership role responsible for department- or company-level Security Engineering, Security Operations, Security Analysis, Cloud Security, Application Security, or DevSecOps
• Extensive background in modern cloud security practices, application security practices, secure software development lifecycle, and cyber security incident response
• Strong skills in threat management, vulnerability management, data security management and information security governance risk and compliance
• Experience with common security frameworks (SOC2, ISO 27001/2, NIST CSF, CSA CCM), common privacy and data protection (GDPR, CCPA, SOX, 23 NYCRR 500) and common corporate compliance requirements
• Familiarity with Amazon Web Services, Google Cloud Platform, IaaS/PaaS/SaaS solutions, Rapid7 or similar tools, Splunk or similar tools, IDS/IPS systems, DLP and NAC technologies, and federated IAM
• Has successfully built and executed on multi-year strategic initiatives, with a strong metrics focus
• Holds at least one professional cybersecurity-related senior certification (CISSP, CISM, CCISO, or equivalent)
• Excellent communication skills, written and verbal. You’re a polished presenter. You can effectively read the situation and adjust your communication style to the audience

• {Preferred} Experience with DevOps, Infrastructure-as-Code, Terraform, Docker, or Kubernetes

If you are ready to start the conversation about how you might contribute to all the happenings at PitchBook, submit your resume today! PitchBook appreciates and respects diversity, and as such, we are an equal opportunity employer.
#LI-JH1