Third Party Risk Jobs in Portland, OR (NOW HIRING)

Job Summary:
Panthalassa is a renewable energy and ocean technology company focused on developing sustainable technologies. They are seeking a Director of Information Security to design and implement security architectures and manage the company's information security program across various environments to facilitate rapid scaling without losing control.
Responsibilities:
• Own the technical roadmap for information security across Panthalassa’s corporate, cloud, and enterprise systems environments
• Design and implement security architecture for identity, endpoint, network, SaaS, and cloud systems, with a focus on secure-by-default standards
• Build practical security guardrails into engineering and operational workflows, including source control, CI/CD, infrastructure as code, secrets management, logging, and access reviews
• Partner with IT and infrastructure teams to harden corporate networks, cloud environments, endpoints, and collaboration systems
• Define and implement identity and access management patterns, including SSO, MFA, role-based access controls, privileged access workflows, and lifecycle management
• Lead vulnerability management across internal systems and applications, including scanner tuning, prioritization, remediation guidance, and verification of fixes
• Establish detection and response capabilities appropriate for the company’s scale, including telemetry strategy, alerting, incident playbooks, and forensic readiness
• Secure enterprise systems and the digital thread that support engineering release, manufacturing, supply chain, and operations
• Perform security architecture reviews for new tools, vendors, infrastructure changes, and internal systems
• Build lightweight, durable security policies and standards that are aligned with how the company actually works
• Partner with legal, finance, IT, and business operations on audit readiness, third-party risk, and customer or partner security requirements
• Drive remediation of high-priority risks through direct implementation, automation, and close partnership with system owners
• Create clear documentation, runbooks, and training that raise the security baseline across the company
• Serve as a senior technical advisor during security incidents and significant operational events
Qualifications:
Required:
• 8+ years of experience in security engineering, infrastructure security, platform security, or a closely related domain
• Strong hands-on experience securing cloud and enterprise environments, including identity, networking, endpoints, SaaS, and logging/monitoring systems
• Experience building and operating security controls in modern engineering environments, including CI/CD pipelines, source control platforms, infrastructure as code, and developer tooling
• Deep knowledge of identity and access management, including SSO, MFA, RBAC, provisioning/deprovisioning, and privileged access design
• Proven experience leading vulnerability management and remediation programs in a fast-moving engineering environment
• Experience designing security architectures and making high-quality tradeoff decisions in complex, ambiguous settings
• Ability to move fluidly between strategic planning and hands-on execution
• Clear written and verbal communication skills, with the ability to work effectively across technical and non-technical teams
• Good judgment, high ownership, and a practical mindset about applying security where it matters most
Preferred:
• Experience as a founding or early security hire at a scaling startup
• Experience securing environments that support hardware engineering, manufacturing, lab operations, or industrial/OT-adjacent systems
• Familiarity with security requirements relevant to enterprise infrastructure, including SOC 2 and ISO 27001 control environments
• Experience with zero trust architecture, device trust, and modern endpoint management
• Experience with cloud security tooling, SIEM/log pipelines, EDR, MDM, and infrastructure policy enforcement
• Familiarity with secure software supply chain controls, including artifact integrity, dependency management, and secrets detection
• Experience evaluating and securing enterprise systems such as PLM, ERP, MRP, MES, QMS, and related integrations
• Experience with incident response, threat modeling, tabletop exercises, and security reviews for critical vendors
• Experience working in highly regulated, high-consequence, or mission-critical industries such as aerospace, defense, energy, robotics, or advanced manufacturing
Company:
Panthalassa is a technology company focused on developing renewable energy systems in the ocean. Founded in 2021, the company is headquartered in Portland, USA, with a team of 51-200 employees. The company is currently Growth Stage.