DIRECTOR OF SECURITY ENGINEERING (REMOTE)

Compass Technology is an internal technology team serving Compass Group through enterprise-wide technology and cybersecurity initiatives. The Director of Security Engineering will lead cloud security, infrastructure security, and detection engineering teams, owning the security engineering roadmap, tooling, controls, telemetry, and automation across the organization.

Responsibilities:

• Lead the Security Engineering organization (Cloud Security, Infrastructure Security, and Detection Engineering) through managers and individual contributors, setting organizational, team, and individual goals aligned to security objectives
• Recruit, develop, and retain technical talent: build clear career paths, mentor managers and engineers, and conduct performance appraisals
• Own the multi-year security engineering roadmap, shaping capabilities, methods, and investment priorities
• Own the security vendor portfolio: tool consolidation and rationalization, procurement, renewals, licensing and budget alignment, support escalations, roadmap influence, and quarterly business reviews. Hold vendors and tools accountable to measurable outcomes and manage tool lifecycle end to end
• Partner across IT, infrastructure, application, and sector technology teams to advance security engineering projects, and lead or support initiatives sponsored by security, technology, and business teams
• Present posture and metrics to the CISO Office and senior technology leadership; serve as executive-level subject matter expert on security engineering, cloud-native controls, and defensive engineering
• Direct the design, deployment, and operation of security visibility and control mechanisms across AWS, GCP, and Azure, including validating adherence through regular monitoring and audits
• Own the technical direction and operational health, availability, coverage, performance, and patch management of the endpoint, network security, and vulnerability management platform stack
• Own SIEM, SOAR, and security telemetry platform strategy: log source prioritization, ingestion optimization and filtering, consumption management, and platform health and efficiency
• Mature detection engineering as a discipline: use cases mapped to recognized adversary frameworks such as MITRE ATT&CK, detection-as-code with version control and testing, tuning, and coverage measurement
• Drive event prioritization and cross-tool correlation to reduce false positives, in collaboration with the Incident Management team
• Direct and advance automation development supporting incident management and other security capabilities, and ensure the health, optimization, and intended results of workflows
• Remain available for escalation during significant security incidents and major security platform disruptions

Requirements:

• 10+ years across cybersecurity and information technology, including 5+ years managing engineering teams and 2+ years leading managers or senior technical leads
• Bachelor's degree in Computer Engineering, Computer Science, Information/Cybersecurity, or equivalent work experience
• Proven experience building or maturing enterprise-scale security engineering functions across cloud security, infrastructure security, and detection engineering, including securing medium to large enterprise infrastructure
• Deep, current experience designing, implementing, and securing cloud infrastructure in one major platform (AWS, GCP, or Azure), with working knowledge of a second
• Strong knowledge of cloud security principles and industry standards (NIST, ISO 27001, CIS)
• Demonstrated ownership of enterprise security tooling, including SIEM, EDR, and web content filtering strategy
• Strong analytical and problem-solving skills, with the ability to assess risk, prioritize competing initiatives, and lead through ambiguity in a decentralized organization
• Excellent written and verbal communication, project management, and documentation skills, with the ability to present security concepts to technical and non-technical audiences
• Broad experience with platforms such as Google SecOps, CrowdStrike, Zscaler, Microsoft 365, vulnerability management, and privileged access management, or equivalents
• Industry certifications (CISSP, CCSP, CISA, CISM, GCIA, GCIH, or cloud security specialty credentials)
• Experience in a large, highly distributed enterprise environment