Who are we?
Checkmarx is the AI-powered application security leader helping the world’s most security-conscious enterprises secure the software that powers modern life. For more than two decades, our unified platform and services have helped organizations protect human- and AI-generated code from the first line through runtime, reducing risk across applications, cloud, and the software supply chain without slowing innovation.
We’re trusted by 1,600+ customers in 70+ countries, including some of the largest enterprises and governments in the world. Guided by research-led innovation and a developer-first mindset, we help every developer, security team, and enterprise build software that is risk-free by design.
What are we looking for?
Checkmarx is seeking a Strategic Director, IT & Information Security to own and scale our global corporate IT function and enterprise security program. This is a Director level leadership role, carrying full accountability for a significant IT and security budget, a global team, and the systems, projects, and controls that keep the company running securely at scale. You will own the delivery of IT services and infrastructure projects company-wide, while directing the design, implementation, and continuous improvement of our corporate security program — including security systems, threat modeling, and offensive security testing. You will partner closely with the Directors of GRC and DevSecOps, and report directly into the CIO/CISO, to ensure IT, security, compliance, and product security efforts are aligned, resourced, and mutually reinforcing. Given the scope and budget accountability of this role, it is positioned and compensated at the upper end of our Director/senior-leadership band
How will you make an impact?
·Own the global IT & Security strategy, P&L, budgets, roadmap, and operating model, balancing reliable day-to-day operations with modernization, automation, and digital transformation.
·Lead the global IT organization and core technology services, including infrastructure, networks, systems, service desk, end-user computing, IAM, and collaboration platforms; establish SLAs/KPIs and drive service quality, efficiency, and employee experience.
·Lead major technology programs and transformations, including infrastructure modernization, migrations, workplace technology, M&A integrations, and other cross-functional initiatives, ensuring delivery on scope, time, and budget.
·Build and scale a high-performing global IT organization while managing strategic vendors, contracts, commercial negotiations, and technology costs.
·Lead corporate security operations and strategy across endpoint, network, email, identity, SIEM/SOC, vulnerability management, cloud environments, security architecture, and security awareness.
· Own security risk and testing programs, including threat modeling, penetration testing, red-team engagements, vulnerability remediation, and security monitoring.
·Lead security incident response and crisis management, including detection, containment, root-cause analysis, post-incident reviews, business continuity, and disaster recovery.
·Partner with GRC and DevSecOps leadership to align IT and security operations with enterprise risk, compliance, and application security requirements, including SOC 2, ISO 27001, and GDPR.
·Provide executive and Board/Audit Committee visibility into IT and security posture, risks, budgets, and strategic priorities, and lead IT & Security due diligence for M&A, partnerships, and major vendors.