AvidXchange, Inc.
VP of Product and Infrastructure Security
AvidXchange, Inc., Charlotte, North Carolina, United States, 28245
Role Overview
Reporting to the CISO, as the VP of Product and Infrastructure Security you will be responsible for safeguarding our digital assets, products, and cloud infrastructure from potential threats and vulnerabilities. You will play a crucial role in shaping and executing our Information Security strategy to protect the enterprise.What You’ll Do
Develop and execute a comprehensive product, application and cloud security strategy aligned with AvidXchange’s business goals, objectives, and industry best practices.Responsible for the development and updating of a 5 year Product and Cloud Security road-map tied to company policies, current and emerging security frameworks, legal and regulatory requirements.Oversee the development, implementation and monitoring of product, application and cloud security policies, standards, baselines, and procedures. Lead teams responsible for conducting security assessments, code reviews, and vulnerability management for company product offerings, applications, and cloud infrastructure. Define and implement a robust application security program, including secure development practices, secure coding standards and continuous monitoring.Collaborate and educate development teams on incorporating effective security measures into the software development lifecycle.Develop and maintain a product security certification process.Ensure product zero day vulnerabilities are quickly identified and addressed.Establish and maintain a comprehensive cloud security framework, covering both infrastructure and platform services. Implement and manage cloud security controls, including identity and access management, data encryption, cyber resiliency, intrusion detection and response.Build and lead a high-performing security team, providing mentorship, coaching, and professional development opportunities.Foster a culture of collaboration, innovation, and accountability within the security organization.Act as a liaison between the security function and key stakeholders, including executive leadership, product teams, customers, etc.What We’re Looking For
Bachelor’s degree in computer science, Information Security or equivalent work experience. 20+ year’s experience and track record for successfully developing and executing security strategies in complex, technology-driven environments. 5+ years of executive information security leadership experience in a demanding SaaS environment.Thorough understanding of enterprise business dynamics and demonstrated ability to foster productive collaboration among organizational verticals, including administrative verticals (Legal, HR).Deep technical expertise in areas of product security, application security, and cloud security. In-depth knowledge of cloud security best practices and cloud platforms (e.g., AWS, Azure, Google Cloud).Proficiency with modern DevSecOps strategies, Engineering and Product workflows, and practical ability embed cybersecurity into product pipelines with speed and agility.We Would Love To See
Relevant security certifications (e.g., CISSP, CISM, CCSK) preferred.Excellent communication, presentation, and leadership skills, with the ability to convey complex security concepts to non-technical audiences.Experience in the Fintech SaaS industry is a significant plus.Ideal candidate has contributed to the Information security industry as a thought leader through public speaking and/or industry frameworks, whitepapers, etc.About AvidXchange
AvidXchange is a leading provider of accounts payable (“AP”) automation software and payment solutions for middle-market businesses and their suppliers. By trade, we are a technology company, but if you ask anyone who works here, they’ll tell you our people are at the core of who we are. We focus on creating a culture of Diversity, Inclusion & Belonging, and are proud to be a safe place where teammates can bring their whole selves to work. At AvidXchange,
mindset is everything . We are
Connected as People ,
Growth Minded , and
Customer Obsessed . These three mindsets represent our culture – who we are, who we’ve always been, and they guide us to improve every day. Since our founding in 2000 in Charlotte, NC, we’ve created a company of over 1,600 teammates working in one of our 5 offices across the U.S., or remotely. AvidXchange is proud to be Certified as a Great Place to Work. The prestigious recognition is based on anonymous data from our teammates and makes official what our teammates have known for years – that AvidXchange is a Great Place to Work.Who You Are
A go-getter with an entrepreneurial mindset – that means you are not afraid of taking risks, winning big or facing the unknown.Someone who understands that business is people centric. Connecting with others as humans first allows you to develop mutually beneficial working relationships.Focused on making a difference for our customers. AvidXchange exists to help solve complex problems for our customers so we can all realize our potential.What You’ll Get
AvidXchange teammates (we call them AvidXers) get the perks and prestige of a publicly traded tech company paired with the flexibility of a founder-led startup. We help our AvidXers develop as professionals and as human beings, providing work/life balance, development programs, competitive benefits and equity options. At AvidXchange, we are building more than a tech company – we are building an experience. We remain committed to a culture where you can fully be 'you’ – connected with others, chasing big goals, and making a meaningful impact. If you want to help us grow while realizing your potential and creating stories you’ll tell for years, you’ve come to the right place.AvidXers Enjoy
18 days PTO*11 Holidays (8 company recognized & 3 floating holidays)16 hours per year of paid Volunteer Time Off (VTO)Competitive Healthcare401k Match up to 4%Parental Leave: 8 weeks 100% paid by AvidXchange***Discounts on Pet, Home, and Auto insuranceBrightDime Financial Wellness Tool, offered free to teammatesWeeCare Childcare Service: helps teammates find affordable daycare, childcare, and tutors 40% less expensive than traditional daycare centersPerks at Work: free discount program that provides teammates the opportunity to save on items from electronics, movie tickets, car buying, vacations, and moreOnsite gym fitness center, yoga studio, and basketball court****Tuition Reimbursement up to the federal maximum of $5,250*****Hybrid Workplace FlexibilityFree parkingEqual Employment Opportunity
AvidXchange is an equal opportunity employer. AvidXchange is committed to equal employment opportunity in accordance with applicable federal, state, and local laws. AvidXchange will not discriminate against applicants for employment on any legally recognized basis. This includes, but is not limited to veteran status, race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age and physical or mental disability.
#J-18808-Ljbffr
Reporting to the CISO, as the VP of Product and Infrastructure Security you will be responsible for safeguarding our digital assets, products, and cloud infrastructure from potential threats and vulnerabilities. You will play a crucial role in shaping and executing our Information Security strategy to protect the enterprise.What You’ll Do
Develop and execute a comprehensive product, application and cloud security strategy aligned with AvidXchange’s business goals, objectives, and industry best practices.Responsible for the development and updating of a 5 year Product and Cloud Security road-map tied to company policies, current and emerging security frameworks, legal and regulatory requirements.Oversee the development, implementation and monitoring of product, application and cloud security policies, standards, baselines, and procedures. Lead teams responsible for conducting security assessments, code reviews, and vulnerability management for company product offerings, applications, and cloud infrastructure. Define and implement a robust application security program, including secure development practices, secure coding standards and continuous monitoring.Collaborate and educate development teams on incorporating effective security measures into the software development lifecycle.Develop and maintain a product security certification process.Ensure product zero day vulnerabilities are quickly identified and addressed.Establish and maintain a comprehensive cloud security framework, covering both infrastructure and platform services. Implement and manage cloud security controls, including identity and access management, data encryption, cyber resiliency, intrusion detection and response.Build and lead a high-performing security team, providing mentorship, coaching, and professional development opportunities.Foster a culture of collaboration, innovation, and accountability within the security organization.Act as a liaison between the security function and key stakeholders, including executive leadership, product teams, customers, etc.What We’re Looking For
Bachelor’s degree in computer science, Information Security or equivalent work experience. 20+ year’s experience and track record for successfully developing and executing security strategies in complex, technology-driven environments. 5+ years of executive information security leadership experience in a demanding SaaS environment.Thorough understanding of enterprise business dynamics and demonstrated ability to foster productive collaboration among organizational verticals, including administrative verticals (Legal, HR).Deep technical expertise in areas of product security, application security, and cloud security. In-depth knowledge of cloud security best practices and cloud platforms (e.g., AWS, Azure, Google Cloud).Proficiency with modern DevSecOps strategies, Engineering and Product workflows, and practical ability embed cybersecurity into product pipelines with speed and agility.We Would Love To See
Relevant security certifications (e.g., CISSP, CISM, CCSK) preferred.Excellent communication, presentation, and leadership skills, with the ability to convey complex security concepts to non-technical audiences.Experience in the Fintech SaaS industry is a significant plus.Ideal candidate has contributed to the Information security industry as a thought leader through public speaking and/or industry frameworks, whitepapers, etc.About AvidXchange
AvidXchange is a leading provider of accounts payable (“AP”) automation software and payment solutions for middle-market businesses and their suppliers. By trade, we are a technology company, but if you ask anyone who works here, they’ll tell you our people are at the core of who we are. We focus on creating a culture of Diversity, Inclusion & Belonging, and are proud to be a safe place where teammates can bring their whole selves to work. At AvidXchange,
mindset is everything . We are
Connected as People ,
Growth Minded , and
Customer Obsessed . These three mindsets represent our culture – who we are, who we’ve always been, and they guide us to improve every day. Since our founding in 2000 in Charlotte, NC, we’ve created a company of over 1,600 teammates working in one of our 5 offices across the U.S., or remotely. AvidXchange is proud to be Certified as a Great Place to Work. The prestigious recognition is based on anonymous data from our teammates and makes official what our teammates have known for years – that AvidXchange is a Great Place to Work.Who You Are
A go-getter with an entrepreneurial mindset – that means you are not afraid of taking risks, winning big or facing the unknown.Someone who understands that business is people centric. Connecting with others as humans first allows you to develop mutually beneficial working relationships.Focused on making a difference for our customers. AvidXchange exists to help solve complex problems for our customers so we can all realize our potential.What You’ll Get
AvidXchange teammates (we call them AvidXers) get the perks and prestige of a publicly traded tech company paired with the flexibility of a founder-led startup. We help our AvidXers develop as professionals and as human beings, providing work/life balance, development programs, competitive benefits and equity options. At AvidXchange, we are building more than a tech company – we are building an experience. We remain committed to a culture where you can fully be 'you’ – connected with others, chasing big goals, and making a meaningful impact. If you want to help us grow while realizing your potential and creating stories you’ll tell for years, you’ve come to the right place.AvidXers Enjoy
18 days PTO*11 Holidays (8 company recognized & 3 floating holidays)16 hours per year of paid Volunteer Time Off (VTO)Competitive Healthcare401k Match up to 4%Parental Leave: 8 weeks 100% paid by AvidXchange***Discounts on Pet, Home, and Auto insuranceBrightDime Financial Wellness Tool, offered free to teammatesWeeCare Childcare Service: helps teammates find affordable daycare, childcare, and tutors 40% less expensive than traditional daycare centersPerks at Work: free discount program that provides teammates the opportunity to save on items from electronics, movie tickets, car buying, vacations, and moreOnsite gym fitness center, yoga studio, and basketball court****Tuition Reimbursement up to the federal maximum of $5,250*****Hybrid Workplace FlexibilityFree parkingEqual Employment Opportunity
AvidXchange is an equal opportunity employer. AvidXchange is committed to equal employment opportunity in accordance with applicable federal, state, and local laws. AvidXchange will not discriminate against applicants for employment on any legally recognized basis. This includes, but is not limited to veteran status, race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age and physical or mental disability.
#J-18808-Ljbffr