Associate Vice President, Security Engineering & Operations

Hyland is the pioneer of the Content Innovation Cloud™, delivering ubiquitous enterprise intelligence to organizations with solutions that unlock actionable insights and drive automation. The Associate Vice President (AVP), Security Engineering & Operations is responsible for building and scaling a high-performance security engineering and operations function that protects Hyland's business and enables engineering, compliance, and adjacent security teams.

Responsibilities:

• Build and lead a highly efficient, AI-enabled Security Operations Center (SOC), delivering threat detection, exposure management, posture management, incident response, and digital forensics capabilities; define and own KPIs for SOC performance including MTTD, MTTR, and SLA adherence
• Oversee and drive continuous improvement of DevSecOps integration, embedding security into CI/CD pipelines and SCA/SAST/DAST tooling; lead secure code review practices, non-human identity and API security programs, and threat modeling to reduce risk across the software development lifecycle
• Direct and approve the design of security systems including zero trust architecture, network segmentation, and identity security; drive offensive and defensive security operations including red teaming and blue team resilience
• Lead end-to-end ownership of multi-faceted and distributed vulnerability management programs, including prioritization frameworks and release gates tied to business risk
• Set vision and collaborate with senior management to define departmental strategy and budget management; develop future leaders and build a management team bench capable of meeting the demands of rapid growth
• Serve as a strategic partner to product, engineering, and technical teams to embed security into the software development lifecycle; act as an escalation point for complex and high-level security issues and remove obstacles for security and stakeholder teams

Requirements:

• Bachelor's degree in computer science, information security, engineering, or a related field, with 15+ years of progressive experience in cybersecurity or engineering leadership, including at least 5 years in SaaS cloud-native environments
• Proven track record of leading incident response, application security, or DevSecOps functions at enterprise scale
• Deep expertise in DevSecOps, cloud-native security, software engineering, and automation, with exceptional knowledge of CI/CD, SRE, and multi-cloud operating environments
• Demonstrated fiscal responsibility and accountability in managing budgets with a track record for consolidating tooling expenses; up to 10% travel time required
• Relevant certifications such as CISSP, CISM, SANS/GIAC, CSSLP, or OSCP, with exceptional ability to design, implement, and prove security effectiveness through evidence-based testing and measurable outcomes
• Deep familiarity with cloud-native security architecture to act as a deeply embedded partner to architecture and development teams
• Experience defining and owning KPIs for SOC performance and engineering delivery, with a focus on coverage gap closure
• Strong ability to build and maintain relationships with stakeholders, sharing threat intelligence and best practices across the organization
• Experience with zero trust architecture, network segmentation, and identity security design and implementation
• Strong people leadership skills with a proven track record of developing future leaders and building high-performance security teams