Director of Security, IT, & Compliance

Who We Are

Murmuration is a nonprofit organization that amplifies the power of civic engagement by providing data, digital tools, and research-driven insights to community-focused organizations so that together we can create an America where everyone can lead healthy, free, and dignified lives.

Every day, people are trying to shape our future for the better. Fighting for water that’s safe to drink. Schools that serve students equitably. Gun laws that make sense. And rallying people who care like we do. And yet too often the skillful organizers working to mobilize communities lack access to technology that could supercharge their efforts. Knocking on every door instead of knowing which will open most easily. And going up against outside interests that have half the heart, but twice the tools.

In communities across America, Murmuration’s partners are leveraging our data, tools, and insights to help thousands of organizers orchestrate millions of individual people to do big things together. Demand big things together. To create the world they want. Together.

About the Position

The Director of Security, IT & Compliance will oversee and shape the teams responsible for Murmuration’s security, IT, and compliance strategies.  The Director of Security, IT & Compliance plays a fundamental role in powering Murmuration’s platform and partners — and instilling trust in what we do and how we handle data systems.  This role is tasked with defining and implementing scalable processes, mitigating risks, and ensuring the integrity, security, compliance, and reliability of the organization’s technology infrastructure. By fostering collaboration between the Security Engineering Team, IT Team, and other key stakeholders, the Director will drive cross-functional initiatives and operational excellence. With a focus on innovation, security, and team leadership, this role is ideal for a strategic and proactive leader passionate about building secure, efficient, and resilient systems to support Murmuration’s mission.

Job Level: M5

What You’ll Do

• Define and execute a comprehensive Security, IT, and Compliance strategy to support Murmuration’s growth and mission;
• Develop and maintain roadmaps for Security, IT, and Compliance initiatives, setting clear priorities and measurable outcomes;
• Establish and execute on a risk management framework, including gap analysis with remediation timelines to identify, assess, and mitigate risks, ensuring regular review and updates;
• Oversee the security and operational reliability of Murmuration’s IT infrastructure, including cloud environments, ensuring reliability and scalability;
• Lead compliance certification efforts and collaborate with internal teams to ensure adherence to relevant frameworks like SOC 2, NIST CSF, ISO27001, and privacy laws. Work with Legal to determine what other frameworks with which to align; this may include GDPR, HIPAA, COPPA, and SOX regulations, as well as considerations specific to 501c3 and 501c4 data hygiene;
• Review and refine processes for key workflows, ensuring effective cross-functional collaboration and timely handling of incoming requests;
• Lead, mentor, and grow the Security Engineering and IT teams, fostering a culture of innovation, accountability, and learning;
• Implement and maintain robust security controls, monitoring systems, and incident response processes to protect Murmuration’s technical assets;
• Manage IT procurement, vendor relationships, and budgets to ensure alignment with organizational goals and cost efficiency; and
• Partner with teams across Engineering, Finance, and People to align on compliance requirements and support organization-wide initiatives.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (Note: Work experience can be substituted for degree requirements);
• 10+ years of progressive experience in IT and Security with at least 5 years in leadership roles;
• Strong knowledge of IT infrastructure, cloud technologies (AWS preferred), and cybersecurity best practices;
• Experience implementing and managing compliance framework(s), such as SOC 2, NIST CSF, ISO27001, GDPR, or HIPAA;
• Proven ability to define and execute strategic plans and translate them into actionable roadmaps;
• Demonstrated success in building and leading high-performing technical teams;
• Strong understanding of risk management frameworks and experience, mitigating risks across IT and security domains;
• Proficiency in automation and infrastructure tools like Terraform, Ansible, or similar technologies;
• Exceptional communication and interpersonal skills, with the ability to collaborate effectively across teams and with non-technical stakeholders; and
• Experience managing budgets and optimizing IT resources to align with organizational goals.

Nice to Haves

• Relevant certifications such as CISSP, CISM, or AWS certifications;
• Experience integrating DevOps principles into security practices;
• Familiarity with advanced monitoring tools like Datadog and their application in security operations; and/or
• Background in mentoring teams and fostering a culture of innovation and continuous learning.

Talented Directors of Security, IT & Compliance come from all walks of life and career. If you are passionate about civic engagement and technology, please apply, even if you do not check every box!

Location and Compensation

The Director of Security, IT & Compliance is a full-time, salaried position with a comprehensive benefits package (more detail below). It is based anywhere in the U.S. The starting salary range for this position is $175,000 - $205,000 and is commensurate with experience.

Our Culture of Care

We work hard to create a culture of care to ensure that our staff are best equipped to lead happy, healthy, and balanced lives. To that end, we offer a comprehensive benefits package which includes:

• Health, vision, and dental insurance with 100% of premiums covered for you and qualifying family members;
• Retirement benefits with a 5% employer match;
• A flexible unlimited PTO plan;
• Generous paid parental leave;
• Pre-tax commuter benefits;
• A company laptop;
• A flexible remote work environment;
• A home office setup stipend for all new employees;
• Monthly reimbursement for remote work expenses;
• A yearly professional development fund;
• Mental health and wellness benefits through Calm and Better Help; and
• Yearly in-person staff retreats; and
• A welcoming culture that celebrates diversity, equity, and inclusion.

An Equal-Opportunity Employer with a Commitment to Diversity

Murmuration is proud to be an equal opportunity employer, and as an organization committed to diversity and the perspective of all voices, we consider applicants equally of race, gender, color, sexual orientation, religion, marital status, disability, political affiliation, and national origin. We reasonably accommodate staff members and/or applicants with disabilities, provided they are otherwise able to perform the essential functions of the job.

Note: Murmuration is two organizations working together to pursue our mission of amplifying the power of civic engagement: Murmuration Research Institute, a 501(c)(3) that conducts research to identify, design, and create the data, tools, and insights that build healthier and more equitable communities; and Murmuration, Inc., a 501(c)(4) that supports organizations working across the country on the nation’s most challenging issues with access to data, tools, and research that build healthier and more equitable communities.