Director of Cybersecurity & Compliance

The Director of Cybersecurity & Compliance leads hands-on security and compliance operations for XpertDox, with responsibility for certification programs, control implementation, and audit readiness. This is an onsite role based in Scottsdale, Arizona.

Key Responsibilities

• Implement and maintain security and compliance controls supporting SOC 2 Type 2 , ISO 27001 , ISO 22301 , HIPAA , and HITRUST certification programs.
• Own evidence collection and continuous control monitoring, including preparation for and execution of third-party audits .
• Own enterprise client security questionnaires, maintain the answer library and trust documentation, and provide technical depth for client security reviews.
• Own role-based access control and manage provisioning and deprovisioning, including periodic access reviews across cloud, on-premise, and remote access. Ensure access governance for the global delivery team in India .
• Run multi-factor authentication (MFA) and single sign-on (SSO) operations.
• Own application and web platform security, including secure development practices, code and dependency scanning , and secrets management .
• Drive remediation of security findings with engineering teams.
• Run vulnerability management and operate endpoint and cloud security controls.
• Coordinate penetration testing and track findings through remediation.

Required Qualifications

• Relevant certification such as CISSP , CISM , CISA , GIAC , or Security+ .
• Hands-on experience implementing and evidencing SOC 2 Type 2 and ISO 27001 controls, ideally using GRC or continuous-monitoring tooling.
• 6+ years in cybersecurity and compliance, including hands-on ownership of security operations or a compliance program.
• Strong identity and access management experience, including RBAC , SSO , MFA , and periodic access reviews across cloud and hybrid environments.
• Application and web security experience, including secure development practices, code and dependency scanning, and vulnerability remediation.
• Experience in healthcare, health-tech, or another environment involving PHI .
• Experience completing enterprise client security questionnaires and supporting audits.
• Team leadership or senior individual-contributor experience.

Location and Work Schedule

This role is onsite at the Scottsdale, Arizona headquarters, Monday through Friday . The position is not remote or hybrid . You must relocate to the Scottsdale area before your start date. Travel is minimal.

Compensation and Incentives

• Base salary: $120,000 to $160,000 per year, commensurate with experience.
• Incentive stock options.
• Relocation assistance, reimbursed against receipts.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life insurance
• 401(k) with matching
• Unlimited PTO and parental leave
• Wellness program
• Friday lunch
• Snacks
• Relocation assistance, reimbursed against receipts