Head of Information Security

Etix is an international, web-based ticketing provider serving entertainment, sports, fairs, and live events across 40+ countries and processing over 50 million tickets annually. As the largest independent ticketing company in North America, we support 2,000+ venues with flexible ticketing, integrated marketing, and e-commerce solutions, and have served customers for over 25 years. Learn more at hello.etix.com.

Etix is seeking a hands-on information security leader to strengthen and mature our security practices across our ticketing and ecommerce platforms. This position will work closely with Engineering, IT, Product, Legal, and executive leadership to identify security risks, establish practical safeguards, and improve our overall security posture.

The ideal candidate combines strong technical security expertise with the ability to independently assess risks, implement practical security improvements, lead initiatives, and coordinate cross-functional teams. This role requires someone comfortable both performing hands-on security work and providing technical guidance to others. This is an opportunity for an experienced security professional to take meaningful ownership of a growing security program, influence technical decisions, and help establish scalable security practices within an established international technology company.

Work Location & Flexibility

We operate on a hybrid schedule where employees are generally expected to work from the office four days a week, with one flexible remote day per week.

Who We’re Looking For

We're looking for someone who understands how to secure modern web applications and cloud infrastructure, can identify and prioritize meaningful risks, and is comfortable working directly with technical teams to implement improvements.

We're more interested in practical experience, sound judgment, technical competence, and the ability to make measurable security improvements than previous job titles or organizational responsibilities.

The successful candidate will:

• Have experience implementing or improving security processes, controls, or programs, with measurable results.
• Be able to assess security risks, prioritize improvements, and work collaboratively with Engineering and IT to implement practical solutions.
• Communicate security concepts clearly to technical teams, business stakeholders, and executive leadership.
• Balance security best practices with operational realities, focusing on solutions that reduce risk without unnecessarily disrupting business operations.
• Be comfortable taking initiative, working independently, and coordinating security activities across multiple departments.

Experience

Required

• 5+ years of progressive experience in information security, application security, security engineering, or related fields.
• Experience implementing or improving security practices in a SaaS, ecommerce, fintech, or comparable technology environment.
• Strong working knowledge of web application, API, and cloud infrastructure security (AWS preferred).
• Practical understanding of:
• • Secure software development lifecycle (SDLC) practices
  • Vulnerability identification, management, and remediation
  • Identity and access management (IAM)
  • Encryption and data protection fundamentals
• Working knowledge of PCI-DSS requirements and payment security practices.
• Experience collaborating with technical teams to identify and address security vulnerabilities.
• Ability to communicate security risks and recommendations to both technical and nontechnical stakeholders.

Preferred

• Experience in high-transaction environments with elevated fraud or security risks, such as fintech, ticketing, ecommerce, or payments.
• Experience working with globally distributed engineering teams.
• Experience supporting PCI-DSS assessments, SOC 2 readiness, or comparable compliance initiatives.
• Familiarity with data privacy regulations and frameworks, including GDPR and the Data Privacy Framework.
• Experience developing incident response procedures, conducting security assessments, or managing security-related projects.
• Security certifications such as CISSP, CISM, CCSP, or comparable credentials.
• Previous experience leading security initiatives, mentoring technical staff, or coordinating cross-functional security efforts.

Responsibilities

Security Strategy & Program Leadership

• Assess existing security practices and identify opportunities to strengthen Etix's overall security posture.
• Develop and maintain a prioritized security improvement plan aligned with business needs and available resources.
• Establish practical security policies, procedures, and controls in collaboration with internal stakeholders.
• Define and track key security metrics, providing regular updates on risks, progress, and recommended improvements.
• Evaluate security tools and technologies that can improve threat detection, vulnerability management, and operational efficiency.

Application & Infrastructure Security

• Work closely with Engineering and IT to identify and address security risks within Etix's applications, APIs, and infrastructure.
• Support the adoption and improvement of secure software development practices, including code security reviews, vulnerability scanning, and remediation processes.
• Collaborate with technical teams to strengthen cloud security, network controls, identity and access management, and monitoring practices.
• Participate in architectural and technical reviews to identify potential security risks and recommend appropriate safeguards.
• Help establish repeatable, automated security processes that reduce manual effort and operational risk.
• Coordinate security improvements across U.S. and international development teams.

Data Governance & Compliance

• Partner with Legal, Product, Engineering, and IT to establish and improve data protection practices, including data classification, access controls, encryption, and retention.
• Support compliance with applicable privacy and data protection requirements by identifying and implementing appropriate technical security controls.
• Coordinate PCI-DSS security activities, including readiness assessments, documentation, remediation efforts, and collaboration with external assessors.
• Support customer and partner security assessments, questionnaires, and compliance-related requests.
• Assist in evaluating readiness for additional security frameworks, such as SOC 2, as business needs evolve.

Incident Response & Risk Management

• Develop, document, and coordinate practical security incident response procedures in collaboration with Engineering, IT, and executive leadership.
• Help establish processes for identifying, reporting, investigating, and resolving security incidents.
• Maintain a security risk register and work with internal teams to prioritize remediation based on business impact.
• Coordinate periodic security assessments, vulnerability reviews, and follow-up remediation activities.
• Serve as a primary point of contact for internal security questions, customer security reviews, and third-party assessments.
• Recommend improvements based on security incidents, assessments, and emerging risks.
  
  

Benefits

• Healthcare: Etix offers competitive medical, dental, and vision coverage options for Etix team members and their eligible family members, including domestic partners.

• Healthcare Financial Savings: Etix offers Flexible Spending Accounts (FSA), Limited Purpose Flexible Spending Accounts (LPFSA), Health Savings Accounts (HSA), and Dependent Care Flexible Spending Accounts (DCFSA) in conjunction with our healthcare offerings. 
• Financial Protection: Life insurance, AD&D insurance, short-term disability, long-term disability and workers’ compensation are offered for eligible team members and paid by the company. Optional additional Life Insurance and AD&D may be purchased to cover an employee, spouse, and/or child(ren).
• Retirement Planning: Etix offers a 401k retirement savings plan with Fidelity Investments. Included in this program is financial planning and budgeting counseling. 
• Vacations & Holidays: Everyone needs some time off from work to take care of personal business, enjoy a well-earned vacation, or just unwind from the demands of everyday life. At Etix, we offer Paid Time Off benefits in addition to paid company holidays. 
• Parental Leave: Parental Leave is available to new Mothers and Fathers to help assist team members welcome a new child to their family. 
• Work Attire Program: Etix offers an every day casual dress code. While on-site or with clients, business casual attire is preferred. Etix offers branded apparel for client facing team members. 

Other Information

• No sponsorship or H1B situations can be accommodated
• Relocation is not available for this position