Associate Director, Security & Compliance (US)
Code and TheoryNew York, New York, United States · Posted 5 months agoDescription
We are seeking an Associate Director, Security & Compliance to lead security, privacy, and compliance for our SaaS products and the client projects we deliver as an agency. You will own this capability end to end, from new business through implementation, certification, and ongoing monitoring. This role is central to how we win and deliver projects, protect client and company data, and earn trust through clear, high quality security and privacy practices.
You will be responsible for audit readiness, ensuring applicable privacy requirements are met, and establishing the standards, processes, and tooling needed to run an effective security and privacy program.
The Machine is the agentic operating system for marketing, built by Code and Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strategy, creative production, and media performance. The Machine helps power agencies across Stagwell's network and world-leading brands.
WHAT YOU’LL DO
- Lead our security program across SaaS products and client projects, setting strategy, priorities, and measurable outcomes
- Lead SOC 2 Type II, ISO 27001, and ISO 42001 readiness and ongoing compliance, including control design, evidence processes, and auditor coordination. Own ISMS and AI governance documentation and oversight
- Lead privacy governance and operational practices, ensuring compliance with applicable requirements including HIPAA, GDPR, and CCPA/CPRA, and addressing data handling, contractual privacy terms, and privacy by design expectations
- Partner with delivery teams to embed security and privacy into how we build, with clear expectations, practical review gates, and patterns for common risks (identity, access, data handling, multi-tenancy, logging, and auditability)
- Establish a repeatable client engagement security plan for client work (environment segregation, access provisioning and deprovisioning, client data handling, incident coordination, and delivery requirements)
- Lead vendor security reviews, including due diligence for critical providers, remediation tracking, and ongoing monitoring
- Support customer assurance efforts including security questionnaires, RFPs, client security reviews, and maintaining trust artifacts and standard responses
- Maintain an incident response program (playbooks, escalation, exercises) and drive post incident improvements
- Build a security and privacy culture through clear guidance, lightweight training, and day to day partnership with teams
WHAT YOU’LL NEED
- 8+ years of progressive experience in information security, including leadership in SaaS and/or professional services environments
- Strong understanding of modern application and cloud security fundamentals (identity and access, encryption and key management, logging and monitoring, vulnerability management)
- Demonstrated ownership of SOC 2 Type II and ISO 27001 programs from readiness through steady state operations
- Strong working knowledge of privacy requirements and practices, including HIPAA, GDPR, and CCPA/CPRA, and experience operationalizing privacy controls in product and client delivery contexts
- Experience building security and privacy processes that work in real delivery environments
- Clear communication skills, able to represent security and privacy with internal teams, auditors, and client stakeholders with differing levels of technical fluency
- Comfort operating across a geographically dispersed organization and coordinating work across time zones
NICE TO HAVES
- Experience in an agency or consulting environment supporting multiple client projects in parallel
- Experience supporting AI-enabled products and data flows, including model and data risk considerations and familiarity with ISO 42001
- Expertise in at least one major cloud platform (GCP, AWS, or Azure) and common SaaS security patterns
- Experience with security monitoring, incident response, and vulnerability management programs in production environments
- Experience with GRC/compliance automation platforms such as Vanta (Drata, SecureFrame)
- Hands-on experience with security tooling across CI/CD, cloud infrastructure, vulnerability scanning, and logging and monitoring workflows
- Relevant security and/or privacy certifications such as CISSP, CISM, CCSP, CIPP, CIPT
ABOUT US
Born in 2001, Code and Theory is a digital-first creative agency that sits at the center of creativity and technology. We pride ourselves on not only solving consumer and business problems, but also helping to establish new capabilities for our clients. With a global client roster of Fortune 100s and start-ups alike, we crave the hardest problems to solve. With a remote-first approach to our people, we have teams distributed across North America, South America, Europe, and Asia. The Code and Theory global network of agencies is growing and includes Kettle, Instrument, Left Field Labs, Mediacurrent, Rhythm, and TrueLogic.
Striving never to be pigeonholed, we work across every major category: from tech to CPG, financial services to travel & hospitality, government and education to media and publishing. We value the collaboration with our client partners, including but not limited to Adidas, Amazon, Con Edison, Diageo, EY, J.P. Morgan Chase, Lenovo, Marriott, Mars, Microsoft, Thomson Reuters, and TikTok.
The Code and Theory network comprises nearly 2,000 people with 50% engineers and 50% creative talent. We’re always on the lookout for smart, driven, and forward-thinking people to join our team.
The target range of compensation for this role is $140,000 - $175,000. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, and location.
Similar jobs
Est. 135,000 USD
The Machine is the agentic operating system for marketing, built by Code and Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strateg…
Est. 130,000 USD
The Machine is the agentic operating system for marketing, built by Code and Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strateg…
Est. 215,000 USD
The Machine is the agentic operating system for marketing, built by Code and Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strateg…
Est. 177,500 USD
Code and Theory is seeking a senior cloud engineer who wants to own the full technical lifecycle of enterprise client deployments — from assessing a client's existing infrastructure and designing the integration architec…
Est. 130,000 USD
The Machine is the agentic operating system for marketing, built by Code and Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strateg…
Est. 135,000 USD
Code and Theory is hiring an Associate Director to work at the core of business transformation engagements within our Enterprise Transformation practice. You will conduct organizational diagnostics, redesign workflows an…
Est. 187,500 USD
The Machine is the agentic operating system for marketing, built by Code & Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strat…
Est. 185,000 USD
The Machine is the agentic operating system for marketing, built by Code and Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strateg…
Est. 135,000 USD
Code and Theory is hiring an Associate Director to work at the core of content and creative transformation engagements within our Enterprise Transformation practice. You will map existing creative workflows, redesign the…
Est. 205,000 USD
Code and Theory is hiring a Senior Director to own the operating model for how creative work gets conceived, produced, governed, and measured inside large enterprise organizations. The stakeholder map runs from CMO to in…
Est. 205,000 USD
Code and Theory is building a portfolio of enterprise solutions co-developed with a major platform partner. These are named, defined, and actively sold solutions — designed to open new use cases for the platform while cr…
Est. 205,000 USD
Code and Theory is hiring a Senior Director to lead large-scale business transformation engagements within our Enterprise Transformation practice. You will own C-suite relationships, design governance and operating model…
Est. 160,000 USD
As a Director, Client Engagement, you’ll serve as a primary point of contact for one - two of our most critical client relationships. You’ll own day-to-day client leadership while guiding account strategy, ensuring excep…
Est. 200,000 USD
Code and Theory is a digital-first creative and technology agency that builds products, platforms, and experiences for global brands. We combine engineering, design, data, and strategy to deliver transformative digital s…
Est. 160,000 USD
The AI Engagement Manager is a forward-deployed, hands-on consultant who works with our AI technology partners to deliver consulting services that maximize value realization from Generative AI investments. Embedded acros…
Est. 187,500 USD
The Adobe Multi-Solution Architect (MSA) will play a vital role in the architecture design, configuration, testing and deployment of Adobe solutions, including Firefly, GenStudio, Experience Manager, Edge Delivery Servic…
Est. 87,500 USD
Code and Theory is the original digital transformation agency. For 25 years, we’ve treated disruption as an invitation, not a threat. While the industry debates what AI replaces, we’re already building what it makes poss…
Est. 187,500 USD
The Adobe Multi-Solution Architect (MSA) will play a vital role in the architecture design, configuration, testing and deployment of Adobe solutions, including Workfront, Fusion, Real Time CDP, Launch, Analytics, Target…
Est. 187,500 USD
The Adobe Multi-Solution Architect (MSA) will play a vital role in the architecture design, configuration, testing and deployment of Adobe solutions, including Experience Platform, Real Time CDP, Experience Manager, Edge…
Est. 120,000 USD
Delivery management is the engine that drives projects forward at Code and Theory. As the cornerstone of our teams, project managers are the glue that binds cross-functional talents, orchestrating every project’s success…
Est. 250,000 USD
As a Group Program Director, you will lead the Delivery capability for a portfolio of clients and/or a major account at Code and Theory, setting the strategic direction for delivery and ensuring the overall health, growt…
Est. 200,000 USD
As a Program Director within Code and Theory’s Enterprise Experience Transformation (EXT) practice, you will be responsible for the delivery of a portfolio of co-developed, productized solutions—built by Code and Theory…
Est. 187,500 USD
The Adobe Multi-Solution Architect (MSA) will play a vital role in the architecture design, configuration, testing and deployment of Adobe solutions, including Experience Manager, Edge Delivery Services, Real Time CDP, L…
Est. 177,500 USD
We are seeking a highly consultative and strategic New Business Director to lead revenue growth across the United States. This role is responsible for identifying, developing, and closing new business opportunities while…
Est. 87,500 USD
The Associate, Sales Enablement supports seller productivity across The Machine by giving client-facing teams the demos, content, and proof they need to win. Sitting at the intersection of sales and enablement, this hand…
Est. 157,500 USD
Production is the engine that drives projects forward at Code and Theory. As the cornerstone of our teams, producers are the glue that binds cross-functional talents, orchestrating every project’s successful delivery. Th…
Code and Theory is a digital-first creative and technology agency that builds products, platforms, and experiences for global brands. We combine engineering, design, data, and strategy to deliver transformative digital s…
Est. 147,500 USD
We’re looking for a Change & Enablement Lead to join our Enterprise Transformation team within the Delivery organization. This role is ideal for someone who thrives at the intersection of people, process, technology,…
Est. 120,000 USD
At Code and Theory, we thrive at the intersection of creativity and technology. We empower brands by driving seamless execution, transformative solutions, and delivering exceptional client experiences. Through a culture…
Est. 115,000 USD
At Code and Theory, we thrive at the intersection of creativity and technology. We build brands through big ideas, bold storytelling, and content that actually moves people. Our teams don't just execute work. They shape…