Joining Collibra’s Field Security team

The Field Security team acts as the critical bridge between our Field teams and our customers, ensuring customer trust remains our number one priority. We engage with Sales, Product, and Engineering to structure security initiatives that add business value and foster high levels of customer satisfaction and loyalty.

Our customers are our true north, and we live this value by consulting directly with strategically important customers to provide resolution on significant, business-critical security issues.

This is a hybrid role based in our Raleigh office. Our hybrid model means you’ll work from the office at least two days each week. This setup helps us stay connected, work more closely together, and keep making progress as a team.

Director of Field Security's at Collibra are responsible for

• Strategic Advisor to Sales combining a deep cybersecurity expertise with ability to engage externally with customers, prospects and regulators.
• Excellent Communicator with ability to articulate and own the security narrative and insights to help drive sales.
• Customer-Facing Security Leader acting as a public facing persona representing Collibra’s security posture, roadmap and philosophy.
• Collaborating and negotiating with internal business, product, and functional leadership to define and manage customer requirements, regulations into clear security objectives.
• Analyzing customer needs, requirements, and expectations from a product technical and security perspective to optimally allocate Field Security resources.
• Handling complex, strategically important situations by forming and implementing complex project plans, specifications, and schedules to ensure critical outcomes are met.
• Continually evaluating the security organization’s capability to define, develop, and implement structures and controls that are scalable, resilient, and effective.
• Engaging the full set of stakeholders to ensure appropriate decision-making regarding security analysis, planning, and evolution.

You have

• Extensive 5 - 7 years professional experience in an information security, field security, GRC andor customer-facing technical leadership role.
• A proven track record of consulting with senior leadership and enterprise customers on business-critical security concerns and structural/operational implications.
• Strong experience in security audits, due diligence questionnaires and third party vendor management practices.
• Experience in technical concepts of software development, including Kubernetes with a proven track record of management of vulnerabilities.
• Strong understanding of compliance frameworks (SOC 2, ISO 27001, HIPAA, FedRAMP, EU AI Act, DORA etc.)
• Excellent written and verbal communications; comfortable presenting to internal and external stakeholders.
• Demonstrated experience establishing organizational standards and managing complex project plans in a rapidly evolving environment.
• Deep understanding of multiple security perspectives, including customer business cases, physical infrastructure, and information assurance.
• Strong cross-functional collaboration skills, particularly working alongside Sales, Product, and Engineering teams.
• A bachelor’s degree or equivalent related working experience is required.
• This position is not eligible for visa sponsorship.
• Because this role supports the US government, it is required that this candidate be a US citizen who resides on US soil.

You are

• Analytical, leveraging multiple sources of data to gain a holistic understanding before reaching conclusions and making clear-eyed decisions about field security risks and trade-offs.
• Authentic, demonstrating self-awareness, self-mastery, and a commitment to ongoing reflection that reinforces integrity across the leadership team.
• Inclusive, soliciting diverse opinions, giving others time to think, and leading others to recognize the assumptions and biases that might sway decision-making.
• Adaptable, ensuring a holistic approach to learning and adapting in a rapidly evolving environment.
• Consistent, demonstrating a consistent approach and manner in all circumstances and ensuring actions align with personal and company values.

Measures of success

• Within your first month, you will gain a holistic understanding of Collibra's field security landscape, establish relationships with key Sales, Product, and Engineering stakeholders, and evaluate our current organizational standards.
• Within your third month, you will actively consult with senior stakeholders within strategically important customers, addressing their critical issues, and begin setting priorities to direct/re-direct field security efforts.
• Within your sixth month, you will define and manage the Field Security strategic roadmap, implement scalable controls, and ensure security initiatives actively add business value and foster customer loyalty.

WHAT WE DO

Our Security and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic initiatives. We’re known for making realistic, data-driven decisions that deliver value in tangible ways to our clients. Our clients ask for us on projects that require a superior combination of technical and business capabilities, people and management skills, and a collaborative mindset. We excel in understanding complex programs and strategic initiatives and breaking them into actionable pieces.

We are actively looking for professionals in the following areas:

• Compliance
• Information Security
• Risk Management
• Data Privacy

The ideal candidate’s experience may include but is not limited to the following:

• Management or participation in Cybersecurity, Information Security, Risk, Compliance and/or Data Privacy Programs or Projects
  • Sample projects/programs could include but are not limited to:
    • Compliance framework mapping and implementation,
    • Regulatory mapping and implementation
    • Audit, risk or regulatory remediation management,
    • Readiness for new laws and regulations,
    • Risk, Compliance or Information Security risk reporting and monitoring
    • Creation of roadmaps to mature or advance Risk, Compliance or Information Security Strategies/Programs/Controls
    • Design and enablement of cyber controls functions and processes
    • Change management related to regulatory adoption or compliance changes
    • Audit or certification readiness
  • Familiarity or direct experience with GRC/Cybersecurity solutions, tools and technologies
  • Control design or maturation for high-demand technical areas such as ERP, Identity and Access Management, Business Continuity and Resiliency, Cloud
  • Knowledge of and/or application of industry specific regulations, laws, and standards such as the EU-GDPR, CCPA/CPRA, HIPAA, PCI
  • Knowledge of and/or application of compliance and security frameworks and standards such as COSO, NIST, ISO
  • Management of regulatory, internal or external audits, or experience as an auditor
  • Projects or roles requiring coordination across lines of defense working with technical, business, compliance, risk and audit teams to deliver solutions
  • Work or projects with military or federal government agencies in Risk, Compliance or Information Security/Cyber Security sectors
  • Certifications: CIPP, CRCM, CRM, ARM, CISSP, CISM

QUALIFICATIONS

Required-

• Alignment to our core values: Excellence, Participation, Integrity, and Collaboration
• Hungry, Humble, Smart
• Demonstrated business and technology acumen
• Strong written and verbal communication skills
• Understanding and experience solving real business problems
• Proven track record of delivering results
• Experience working with and/or leading a team
• Ability to work across industries, roles, functions & technologies
• Authorization for permanent employment in the United States (this position is not eligible for immigration sponsorship)

Preferred-

• Bachelor’s degree
• 8+ years professional experience
• Experience across our service offerings