Director of Security

Finalsite is the most valued partner for K–12 schools to build trust, strengthen community, and grow enrollment. Ranked among the best EdTech Companies in America, Finalsite supports more than 7,000 schools and districts worldwide with an integrated platform for websites, communications, mobile apps, enrollment, and marketing services.

Headquartered in Glastonbury, Connecticut, Finalsite is a global company with employees working remotely across nearly every U.S. state, as well as throughout Europe, South America, and Asia.

We believe people do their best work when they feel supported, connected, and empowered to grow. That’s why we invest in our employees through competitive benefits, professional development opportunities, and a collaborative culture built on partnership and purpose. Whether you’re looking to expand your skills, take on new challenges, or make a meaningful impact in education, Finalsite offers the opportunity to grow your career while helping schools thrive.

At Finalsite, every interaction matters — with our clients, with each other, and with the schools and families we serve. Join us and help shape stronger school communities around the world

You will lead the team responsible for it. This is a hands‑on leadership role at a company that is formalizing its security program. You will set direction for the team, lead us toward SOC 2 Type 2 attestation, lead the response when something goes wrong, and build the practices that let engineering teams ship securely without waiting in a queue for permission.

The environment is broad. Finalsite is an established software estate spanning several products and several generations of technology, hosted across more than one cloud provider, and built by distributed teams in multiple countries. The products are increasingly meant to work together as one platform, which means the security program has to span products as well. Your work will cover compliance, customer trust, vendor risk, application security, cloud and infrastructure, and identity and access.

We want SOC 2 Type 2 attestation to describe how our engineering teams actually work. Type 2 looks at whether controls operated consistently over an observation period, so they have to hold up in everyday practice and not only exist on paper. That means controls built into the design review, deployment, access, and incident practices teams already follow, with evidence produced as a byproduct of that work instead of assembled before an audit.

The attestation matters to our customers, and the program behind it matters more.

You will report to the Senior Director of SRE and Security, in the same organization as the SRE team you will work with every day. Finalsite also has a part‑time CISO, who approves security policy, makes formal risk acceptance decisions, and is accountable for the program to auditors and customers. You will run the program that the CISO oversees. That includes the team, the roadmap, the security documentation and assessments customers see, and the decisions you bring to the CISO.

You do not need K‑12 experience or familiarity with our stack. We are looking for a security leader who can earn engineers' trust, who is comfortable being accountable when an incident happens, who can explain risk plainly to executives and to customers, and who works well with a CISO who holds the final call on policy and risk.

100% Remote - Anywhere within the US

• Lead the security team: set its priorities, hire, develop, and manage its engineers and analysts, including performance reviews, promotions, and compensation recommendations

• Build and run the security roadmap, agreeing priorities with the CISO, ranking work by risk to schools and to the…