Senior Director, Information Security (Remote)

Job Summary

Neumo is building a unified Information Security program across five lines of business and three legacy environments — Avenu, ITI, and GovOS. The CISO sets strategy and owns the board and executive relationship; the Senior Director, Information Security owns execution. This is a distinct, operational mandate: you run the program day to day, lead the four functional teams, make the working-level calls on tooling and process, and are personally accountable for the roadmap that gets us to SOC 1, SOC 2, PCI DSS, FedRAMP High, and GovRAMP.

This role exists because compliance commitments at this scale don't run on strategy alone — they run on someone who manages the leads, resolves the conflicts, and keeps evidence collection, scans, and assessments on schedule across three environments that don't yet operate the same way.

Duties and Responsibilities

Team Leadership

-------------------

• Directly manage the four functional leads — GRC, AppSec, Cloud/Vulnerability, and SecOps — setting priorities, removing blockers, and holding them accountable to delivery.
• Run the operating cadence for the team: weekly leads sync, sprint/quarter planning, and performance management for direct reports.
• Build a consistent operating model across the four functions so GRC, AppSec, Cloud/Vuln, and SecOps work from shared priorities rather than in silos.

Cross-Entity Execution

---------------------------

• Resolve tooling and process decisions at the working level across Avenu, ITI, and GovOS
• Own the standardization roadmap that brings three legacy environments onto common tooling, control sets, and operating procedures.
• Act as the escalation point when legacy entities disagree on approach; make the call and move the work forward.

Compliance Program Operations

---------------------------------

* Own the operational roadmap behind SOC 1 and SOC 2: continuous evidence collection, control owners, and audit readiness ahead of annual aud