• Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, and serve as a Subject Matter Expert (SME) for systems undergoing the authorization process. • Update and track POA&M entries by documenting findings, logging remediation actions, and keeping milestone dates current to ensure issues move toward closure. • Proven ability to work independently and collaboratively with minimal oversight • Ability to generate clear, accurate, and audit-ready cybersecurity reports, including vulnerability summaries, compliance status updates, and risk findings for technical and leadership audiences • Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. • Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization. • Brief senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Role Description As a Virtual Cyber Security Sales Engineer at our Client, you will play a pivotal role in driving the success of our cybersecurity solutions across the United States. This position offers a unique blend of technical knowledge, sales skills, and the opportunity for nationwide travel. - Collaborate with the sales team to understand customer needs, technical requirements, and business challenges. - Act as a trusted technical advisor to customers, offering insights into how our cybersecurity solutions can effectively address their specific pain points. - Deliver engaging presentations and product demonstrations to showcase the capabilities and benefits of our solutions. - Design and propose customized cybersecurity solutions that align with customers' security objectives and technical environments. - Conduct technical deep-dive discussions with customers to address complex inquiries and concerns. - Develop and maintain strong relationships with customers, becoming their go-to resource for cybersecurity insights. - Collaborate with internal teams to ensure smooth implementation and deployment of solutions, providing ongoing support as needed. - Stay up to date with industry trends, emerging threats, and competitive landscape to better position our offerings. - Contribute to the development of sales collateral, technical documentation, and training materials. - Represent our client at industry events, trade shows, and conferences, with the willingness to travel throughout the US. Qualifications - Bachelor’s degree in computer science, Information Technology, or a related field (or equivalent practical experience). - Proven experience in a customer-facing technical role, such as sales engineering, solutions engineering, or technical consulting. - Strong understanding of cybersecurity principles, technologies, and industry best practices. - Familiarity with a wide range of cybersecurity solutions, including but not limited to network security, endpoint security, threat intelligence, and cloud security. - Excellent communication and presentation skills, with the ability to explain complex technical concepts to both technical and non-technical audiences. - Demonstrated ability to collaborate effectively with cross-functional teams, including sales, marketing, and product development. - Willingness to travel throughout the United States as needed. - Relevant certifications such as CISSP, CISM, CEH, or equivalent, are a plus. - Strong problem-solving skills and a proactive approach to identifying and addressing customer needs. Benefits - Competitive salary and performance-based incentives. - Comprehensive health, dental, and vision insurance plans. - 401(k) retirement savings plan with company match (soon). - Flexible remote work environment with the opportunity for travel. - Ongoing professional development and training opportunities. - Collaborative and inclusive company culture that values diversity.

• Develop and maintain the enterprise security architecture roadmap aligned with corporate security strategy and business goals. • Establish security reference architectures, patterns, and standards covering on-premises, cloud, and hybrid environments. • Lead architectural assessments for new technologies, platforms, and major initiatives. • Architect secure solutions across cloud (Azure/AWS), applications, data, and networks. • Ensure alignment with regulatory, privacy, and internal policy requirements (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS). • Partner with risk, compliance, and audit functions to assess security posture and identify architectural gaps. • Serve as a senior advisor to IT, engineering, and business leaders on secure architecture and emerging threats.

Collectors is the leading creator of innovative technology that provides value-added services for collectors worldwide. We grade, authenticate, vault, and sell millions of record-setting collectibles, all while modernizing and digitalizing the process to further our mission of helping collectors pursue their passions. We’re always on the lookout for talented people to join our growing team. Our services span collectible trading cards, autographs, comic books, coins, video games, event tickets, and memorabilia. Our subsidiaries include PSA, PCGS, Beckett, SGC, and Card Ladder. Since our founding in 1986, we have graded and authenticated millions of items. We employ more than 3000 people across our headquarters in Santa Ana, California and offices in New Jersey, Texas, Florida, Japan, Shanghai, Hong Kong, Canada, Mexico, Germany, and France. As part of our interview process, we request that candidates have their cameras on during video interviews. This helps foster meaningful conversation and allows us to create an experience that closely resembles our standard working environment. Certain interview steps may take place by phone. For remote roles, and at our discretion, candidates may be asked to participate in an on-site interview as part of the final stages of the process. We understand there may be occasional circumstances requiring accommodation and are happy to discuss them as needed. Your recruiter will be able to clarify expectations and answer any questions you have. We’re transforming the collecting experience with technology that brings authentication, grading, and trading into the modern era. Our products are equalizing the playing field by providing tools that make complex research analytics — including pricing, scarcity reports, and historic sales data — accessible to every collector, old or new. Our engineering mission is to democratize technology while promoting innovation, collaboration, and continuous learning throughout the organization. We're seeking engineers to utilize advanced technology in agile settings, with a focus on improving the customer experience for every collector. We’re looking for an Information Security Director to join our Cybersecurity team to prioritize the right risks for the organization and partner with cross functional stakeholders to ensure security is incorporated into all aspects of the business. You’ll report to the VP of Engineering, Information Security and Platforms. Collectors is committed to utilize cybersecurity, risk and privacy best practices across our environment to protect our customers, employees and our brand. Remote or hybrid candidates will also be considered. We believe that there is significant value in in-person collaboration. If you live within a 1 hour commuting distance to one of our offices, you will be required to be onsite most of the time. This will be discussed further as part of the recruiting process. What You’ll Do: - Lead the information security program across application security, cloud security, security operations, and GRC, serving as the operational leader responsible for refining and driving the information security roadmap into executed outcomes. We’re focused on ensuring that we’re prioritizing risk reduction over checkbox security and proactively incorporating emerging threats and trends. - Own the security operations function, including detection and response, threat intelligence, incident management, and SOC maturity, ensuring the organization can rapidly identify, contain, and recover from security events. - Drive the application security program, embedding secure development practices, code analysis tooling, and vulnerability management into the SDLC in close partnership with product and platform engineering teams. - Establish and mature cloud security capabilities, defining and enforcing security standards across cloud environments including architecture review, configuration management, workload protection, and cloud-native detection and response. - Oversee governance, risk, and compliance activities, including regulatory and framework alignment (SOC 2, ISO 27001, NIST, HITRUST, or similar), risk assessment processes, policy lifecycle management, and audit coordination. - Partner with Internal Platform teams to define and implement appropriate security guardrails within the environment. - Build and maintain the organization's security risk register, providing the stakeholders with clear, data-informed visibility into the threat landscape, control gaps, and residual risk across the enterprise. - Collaborate cross-functionally with engineering, IT, legal, and privacy stakeholders to embed security into organizational processes and decision-making rather than operating as a gatekeeping function. - Define and track security KPIs and program metrics — such as mean time to detect/respond, vulnerability remediation SLAs, and compliance posture — to measure program effectiveness and define target risk postures across applications. - Lead, develop, and scale a high-performing security organization, managing team leads across multiple disciplines, investing in professional development, and building a culture that balances security rigor with operational pragmatism. Who You Are: - An experienced security leader with 10+ years in information security, including 5+ years leading security teams across multiple disciplines and at least 2+ years managing managers or cross-functional security functions. - Broad and deep across the security domain. You've built or matured programs spanning AppSec, CloudSec, SecOps/IR, and GRC — and you're comfortable operating across all of them without losing depth in any single area. - Strong in security operations and incident response. You've led or directly overseen SOC teams, detection engineering, and incident response processes, and you understand what it takes to build a mature, metrics-driven detection and response capability. - Technically credible in cloud and application security. You have hands-on familiarity with securing cloud environments (AWS, Azure, or GCP), modern application architectures, CI/CD pipelines, and container-based workloads, and you can engage meaningfully with engineering teams on technical trade-offs. - Well-versed in governance and compliance frameworks. You've led organizations through SOC 2, ISO 27001, NIST CSF, HITRUST, or similar frameworks and can manage audit cycles and regulatory requirements without letting compliance become the sole definition of security. - A strategic partner to the CISO. You're skilled at operationalizing security strategy, translating executive-level priorities into roadmaps and team-level execution, and surfacing risk with clarity and context. - Collaborative by default. You build productive relationships with engineering, IT, legal, and privacy teams, and you approach security as an enabling function rather than a blocker — while still holding firm on non-negotiable standards. - Metrics-oriented and outcome-driven. You use data to measure program health, prioritize investment, and communicate risk to technical and non-technical audiences alike. - A strong people leader and culture builder. You attract and retain top security talent across disciplines, create clear career pathways, and foster an environment where analysts, engineers, and GRC professionals all feel ownership over the mission. - A clear, confident communicator who can brief executives on risk posture, walk engineering teams through threat models, and represent the security organization in cross-functional forums with equal effectiveness. Salary Range: The salary range for this position is $212,000 to $312,000. Actual compensation on this range varies based on a variety of non-discriminatory factors, including location, job level, experience, and skill set. This role may be eligible for bonuses, commissions, or other forms of compensation, please ask your recruiter for details. Reasons To Join Us: - Health Insurance: All full-time employees are eligible to enroll in Medical, Dental, and Vision. - Additional Benefits: Full-time employees are eligible for fertility, commuter, and educational assistance benefits. - 401(K) Matching Plan: We are proud to offer a competitive 401k matching plan to our employees to support their future financial goals. - Vacation: All salaried employees are eligible for flexible time-off. - Holiday Pay: All regular, full-time employees are eligible for ten company paid holidays. - Employee Discounts: Employees receive discounts on select grading services for approved submissions. - Flexible Hours: Many of our teams offer flexible schedules with varying shifts and will work with you to accommodate your needs. - Fun Working Environment: Our team members are invited to participate in celebrations, holiday events, and team building activities. - Additional Resources: Collectors Tech Blog, PSA. Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. 11 Candidates must be authorized to work in the United States. Collectors uses e-Verify to validate your ability to work legally in the United States. We are aware that there are instances where individuals are receiving job offers that fraudulently allege to be from Collectors or one of our business units. This type of fraud can be carried out through false websites, through fake e-mails claiming to be from the company or through social media. We never ask for personal information such as your bank account, Social Security numbers or National IDs, nor do we send or request payments for the purchase of business-related equipment. If you suspect fraud, please reach out to people@collectors.com. We are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or other class protected by applicable law. We believe that a team that represents a variety of backgrounds, perspectives, and skills will better service the diverse community of collectors we support. If you require an accommodation to apply or interview with us due to a disability or special need, please email people@collectors.com. U.S. residents: for disclosures relating to personal information we collect during the employment application and recruitment process, please see our Privacy Notice for U.S. Applicants. If you are based in California, you can read information for California residents here.