Director - Cyber Security

About Us

HighRadius, a renowned provider of cloud-based Autonomous Software for the Office of the CFO, has transformed critical financial processes for over 800+ leading companies worldwide. Trusted by prestigious organizations like 3M, Unilever, Anheuser-Busch InBev, Sanofi, Kellogg Company, Danone, Hershey's, and many others, HighRadius optimizes order-to-cash, treasury, and record-to-report processes, earning us back-to-back recognition in Gartner's Magic Quadrant and a prestigious spot in Forbes Cloud 100 List for three consecutive years.

With a remarkable valuation of $3.1B and an impressive annual recurring revenue exceeding $100M, we experience a robust year-over-year growth of 24%. With a global presence spanning 8+ locations and a recent addition in Poland, we're in the pre-IPO stage, poised for rapid growth. We invite passionate and diverse individuals to join us on this exciting path to becoming a publicly traded company and shape our promising future.

Key Responsibilities

• Lead the organization’s end-to-end cyber security strategy across risk & compliance, product security, security operations, and identity & access management.
• Build, implement, and run enterprise-wide information security compliance programs, including ISO 27001 and ISO 42001, ensuring policies, controls, governance, audits, and continuous improvement mechanisms are in place.
• Drive the company’s risk and compliance framework for information security, including risk assessments, control monitoring, remediation planning, and regulatory/security governance for a financial technology environment.
• Define and lead the Product Security charter with a strong focus on secure by design and secure by default principles across the software development lifecycle.
• Establish security standards to ensure that code, applications, infrastructure, and environments are secured across cloud and on-premise setups, including GCP and hybrid environments.
• Own the security architecture function by defining and reviewing the right preventive, detective, and corrective controls across applications, infrastructure, network, data, and platforms.
• Lead Security Operations including 24x7 monitoring, threat detection, incident response, crisis management, and post-incident remediation.
• Manage and respond to a broad spectrum of cyber incidents such as customer data leakage, ransomware, account compromise, insider threats, and infrastructure attacks, especially in a financial organization / SaaS environment.
• Strengthen the organization’s readiness around SOX-related security controls, partnering with internal stakeholders to ensure proper design, implementation, and auditability of security controls.
• Provide strategic leadership on security engineering and tooling, including identification, evaluation, procurement, and implementation of security tools required for prevention, detection, response, and compliance.
• Lead Identity and Access Management (IAM) strategy, including privileged access management, access governance, authentication controls, least-privilege models, and lifecycle access controls.
• Work closely with engineering, product, infrastructure, legal, audit, and leadership teams to embed security into business and technology decisions.
• Build and lead high-performing cyber security teams spanning compliance, architecture, product security, operations, and IAM.
• Act as a senior security leader such as CISO / CSO / VP Cyber Security / Cyber

Security Leader, driving security vision, execution, and stakeholder confidence across the enterprise.

Skills & Experience Needed

• 15+ years of progressive experience in cyber security / information security, with leadership experience in roles such as CISO, CSO, VP Cyber Security, Security

Leader, or Security Architect.

• Strong expertise in Information Security Risk & Compliance, with hands-on experience implementing and operationalizing ISO 27001 and ISO 42001 compliance programs.
• Deep understanding of security governance, control frameworks, risk management, audit readiness, policy design, and regulatory compliance in enterprise environments.
• Proven experience in Product Security, including secure SDLC, threat modeling, secure architecture reviews, code and infrastructure security, DevSecOps practices, and secure-by-design principles.
• Strong knowledge of securing SaaS products, cloud-native environments, and hybrid infrastructure, especially across GCP and on-premise environments.
• Strong security architecture background with the ability to define appropriate controls across application, platform, network, endpoint, cloud, and data security layers.
• Hands-on leadership experience in Security Operations, including SOC oversight, incident response, threat detection, ransomware response, breach management, and cyber resilience.
• Good understanding of SOX controls and their intersection with cyber security, particularly in regulated or financial environments.
• Experience in security engineering and security tool procurement, including evaluating business needs, selecting the right tools, managing implementation, and optimizing security investments.
• Strong expertise in Identity and Access Management, including PAM, RBAC, SSO,

MFA, joiner-mover-leaver processes, and access governance.

• Experience leading security programs in financial services, fintech, enterprise SaaS, or highly regulated organizations is strongly preferred.
• Strong team management and stakeholder management capability, with experience leading cross-functional teams and influencing senior leadership.
• Ability to balance strategic leadership with hands-on execution, and translate cyber security priorities into business-aligned outcomes.