Director of Cyber Security

Senior Director Security Operations & Platform Engineering (Confidential Search)

ABOUT THE OPPORTUNITY

Ramp Talent is partnering with a well-established multi-brand online learning company with a high-volume e-commerce business. The company is hiring a Senior Director to own how software is built shipped and protected across its portfolio.

This leader will run two organizations: an established Security Operations and Information Security function and a Platform Engineering and Developer Experience (DevEx) organization that you will build from the ground up. The goal is to give every engineer a secure self-service AI-augmented path to production on AWS.

Were looking for a hands-on AI-first technology executive who has protected high-volume e-commerce environments built a platform team around a clear North Star and scaled strong organizations through great people leadership.

WHAT YOULL DO

Security Operations & Information Security

• Build and lead SecOps: 24x7 detection and response threat intelligence vulnerability management and incident command with clear SLAs and runbooks
• Own the information security program including risk management policy security architecture reviews and audit readiness for PCI DSS SOC 2 and privacy regulations (CCPA GLBA HIPAA)
• Secure the e-commerce and payments surface: checkout identity and account takeover fraud and bot mitigation WAF/edge protection and vendor risk
• Drive Zero Trust access least-privilege identity controls and company-wide secrets management
• Apply AI to security operations (automated triage AI-assisted detection engineering agentic response) and set guardrails for safe use of AI and LLMs across the business

Platform Engineering & Developer Experience

• Define the Platform North Star and DevEx metrics (DORA lead time change failure rate MTTR developer satisfaction) and hold the org accountable to them
• Build an Internal Developer Platform with golden paths self-service environments and Terraform-based infrastructure-as-code so teams go from idea to production in hours not weeks
• Own CI/CD observability and SRE practices (SLOs blameless post-mortems) across AWS workloads (ECS Lambda RDS event-driven services)
• Embed DevSecOps into the platform (scanning SBOM policy-as-code secret detection) so the secure path is the default path
• Partner with FinOps to make cloud cost efficiency a first-class platform outcome

Leadership

• Champion an AI-first engineering operating model: AI-assisted coding testing incident resolution and platform automation
• Hire and develop managers and senior ICs across SecOps Platform SRE and DevEx
• Own budgets vendor and tooling strategy and ROI-driven investment cases
• Report risk posture and platform health to executives and the board and partner closely with Product Data and engineering leaders

WHAT YOU BRING

Required

• 15 years in engineering infrastructure or security
• 7 years leading multi-team organizations including managers of managers and 30 engineers
• A track record running SecOps / InfoSec for a high-traffic e-commerce or digital commerce business including PCI DSS and SOC 2 programs
• Proven success building a platform engineering or DevEx team from the ground up with measurable gains in delivery speed and reliability
• Deep AWS expertise across security (IAM GuardDuty Security Hub KMS WAF) networking containers and serverless
• An AI-first mindset: you use AI tools daily and have embedded AI into security and engineering workflows at scale

Preferred

• Experience in EdTech multi-brand or regulated industries (financial services healthcare)
• CISSP CISM or AWS Security Specialty certification

HOW YOU OPERATE

• Strong technologist: credible with principal engineers; can review architecture threat models and IaC and make sound calls under pressure
• Builder and operator: balances strategy with execution and runs calm decisive incident response
• People leader: attracts and grows talent and builds accountable teams where security and DevEx are shared responsibilities
• Executive communicator: translates technical risk and platform investment into clear business outcomes

WHAT SUCCESS LOOKS LIKE IN YEAR ONE

• A measurable security posture baseline reduced mean time to detect and respond and clean PCI and SOC 2 audits
• A published Platform North Star with golden paths adopted by most product teams and improved DORA metrics
• A fully staffed engaged leadership bench across SecOps and Platform with AI embedded in daily operations

This is a confidential search. The company name will be shared with qualified candidates after an initial conversation with Ramp Talent. All inquiries are handled with discretion.