Director - Cyber Security

About Us

HighRadius, a renowned provider of cloud-based Autonomous Software for the Office of the CFO, has transformed critical financial processes for over 800+ leading companies worldwide. Trusted by prestigious organizations like 3M, Unilever, Anheuser-Busch InBev, Sanofi, Kellogg Company, Danone, Hershey's, and many others, HighRadius optimizes order-to-cash, treasury, and record-to-report processes, earning us back-to-back recognition in Gartner's Magic Quadrant and a prestigious spot in Forbes Cloud 100 List for three consecutive years.

With a remarkable valuation of $3.1B and an impressive annual recurring revenue exceeding $100M, we experience a robust year-over-year growth of 24%. With a global presence spanning 8+ locations and a recent addition in Poland, we're in the pre-IPO stage, poised for rapid growth. We invite passionate and diverse individuals to join us on this exciting path to becoming a publicly traded company and shape our promising future.

Key Responsibilities

Lead the organization's end-to-end cyber security strategy across risk & compliance,
product security, security operations, and identity & access management.
Build, implement, and run enterprise-wide information security compliance programs,
including ISO 27001 and ISO 42001, ensuring policies, controls, governance, audits,
and continuous improvement mechanisms are in place.
Drive the company's risk and compliance framework for information security, including
risk assessments, control monitoring, remediation planning, and regulatory/security
governance for a financial technology environment.
Define and lead the Product Security charter with a strong focus on secure by design
and secure by default principles across the software development lifecycle.
Establish security standards to ensure that code, applications, infrastructure, and
environments are secured across cloud and on-premise setups, including GCP and
hybrid environments.
Own the security architecture function by defining and reviewing the right preventive,
detective, and corrective controls across applications, infrastructure, network, data,
and platforms.
Lead Security Operations including 24x7 monitoring, threat detection, incident
response, crisis management, and post-incident remediation.
Manage and respond to a broad spectrum of cyber incidents such as customer data
leakage, ransomware, account compromise, insider threats, and infrastructure attacks,
especially in a financial organization / SaaS environment.
Strengthen the organization's readiness around SOX-related security controls,
partnering with internal stakeholders to ensure proper design, implementation, and
auditability of security controls.
Provide strategic leadership on security engineering and tooling, including
identification, evaluation, procurement, and implementation of security tools required
for prevention, detection, response, and compliance.
Lead Identity and Access Management (IAM) strategy, including privileged access
management, access governance, authentication controls, least-privilege models, and
lifecycle access controls.
Work closely with engineering, product, infrastructure, legal, audit, and leadership
teams to embed security into business and technology decisions.
Build and lead high-performing cyber security teams spanning compliance,
architecture, product security, operations, and IAM.
Act as a senior security leader such as CISO / CSO / VP Cyber Security / Cyber
Security Leader, driving security vision, execution, and stakeholder confidence across
the enterprise.

Skills & Experience Needed

15+ years of progressive experience in cyber security / information security, with
leadership experience in roles such as CISO, CSO, VP Cyber Security, Security
Leader, or Security Architect.
Strong expertise in Information Security Risk & Compliance, with hands-on experience
implementing and operationalizing ISO 27001 and ISO 42001 compliance programs.
Deep understanding of security governance, control frameworks, risk management,
audit readiness, policy design, and regulatory compliance in enterprise environments.
Proven experience in Product Security, including secure SDLC, threat modeling,
secure architecture reviews, code and infrastructure security, DevSecOps practices,
and secure-by-design principles.
Strong knowledge of securing SaaS products, cloud-native environments, and hybrid
infrastructure, especially across GCP and on-premise environments.
Strong security architecture background with the ability to define appropriate controls
across application, platform, network, endpoint, cloud, and data security layers.
Hands-on leadership experience in Security Operations, including SOC oversight,
incident response, threat detection, ransomware response, breach management, and
cyber resilience.
Good understanding of SOX controls and their intersection with cyber security,
particularly in regulated or financial environments.
Experience in security engineering and security tool procurement, including evaluating
business needs, selecting the right tools, managing implementation, and optimizing
security investments.
Strong expertise in Identity and Access Management, including PAM, RBAC, SSO,
MFA, joiner-mover-leaver processes, and access governance.
Experience leading security programs in financial services, fintech, enterprise SaaS,
or highly regulated organizations is strongly preferred.
Strong team management and stakeholder management capability, with experience
leading cross-functional teams and influencing senior leadership.
Ability to balance strategic leadership with hands-on execution, and translate cyber
security priorities into business-aligned outcomes.