Director - Information Security

Security Strategy & Ownership

- Own information security strategy across application security, cloud security, data protection, and incident response

- Set clear priorities, standards, and expectations for how security operates across the company

- Anticipate future risks as the business, product, and customer base scale

Customer Trust & GTM Partnership

- Act as a senior, customer-facing security leader in sales cycles, renewals, and security reviews

- Own responses to complex customer security questionnaires and escalations

- Partner closely with leadership to unblock deals while maintaining a high security bar

Leadership & Team Building

- Lead and grow the information security team, including hiring, mentoring, and performance management

- Create clear ownership across security operations, compliance, and risk

- Build strong working relationships with Engineering, Product, and IT leadership

Compliance & Risk Management

- Own and evolve compliance programs (e.g., SOC 2, ISO 27001 / 42001, GDPR)

- Lead audits, risk assessments, and remediation efforts with clarity and follow-through

- Translate risk into clear, actionable decisions for business and technical leaders

Execution & Incident Readiness

- Ensure strong day-to-day security operations, including monitoring, vulnerability management, and incident response

- Lead response to security incidents and post-incident reviews when required

- Drive continuous improvement through better tooling, automation, and processes

Requirements

- Bring 10+ years of experience in information security, with experience leading security programs or teams

- Strong background in SaaS, cloud-native, or product-led companies

- Experience in setting up security frameworks and compliance standards (SOC 2, ISO, GDPR, NIST)

- Bonus: Experience scaling security in a fast-growing SAAS company