Head of Security

Overview

We are looking for a Head of Security to lead our company’s security strategy and execution across product, infrastructure, and internal operations. This person will be responsible for building a practical, high-trust security program that protects customer data, supports compliance obligations, and enables the business to move quickly without taking on unacceptable risk.

The Head of Security will work closely with engineering, IT, legal, and executive leadership to identify risks, define security standards, manage incidents, and strengthen our overall security posture.

Responsibilities

• Own the company’s overall security strategy, roadmap, and risk management program

• Design, implement, and maintain security controls across cloud infrastructure, internal systems, and product environments

• Partner with engineering to improve application security, secure development practices, and security architecture review

• Lead security monitoring, detection, incident response, and post-incident remediation

• Establish and maintain identity and access management policies and controls

• Oversee vulnerability management, security assessments, penetration testing, and remediation tracking

• Manage security compliance initiatives such as SOC 2, vendor reviews, customer security questionnaires, and internal policy programs

• Develop disaster recovery, business continuity, and incident readiness processes

• Evaluate and manage third-party and vendor security risk

• Build and maintain security policies, standards, and training programs across the organization

• Serve as the primary internal leader for security matters and as a trusted external representative with customers, auditors, and partners

Qualifications

• Significant experience in security leadership, security engineering, or a related field

• Strong understanding of cloud security, infrastructure security, application security, and identity systems

• Experience building or scaling security programs in a startup or high-growth environment

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or similar

• Experience leading incident response and driving remediation across technical teams

• Ability to balance security rigor with business speed and product execution

• Strong communication skills, with the ability to work effectively across technical and non-technical teams

Preferred Qualifications

• Experience in SaaS, enterprise software, or data-sensitive environments

• Background working closely with engineering and product teams on secure software development

• Experience supporting customer-facing security reviews and enterprise sales processes

• Familiarity with modern cloud platforms, endpoint management, logging and monitoring tools, and security automation

What Success Looks Like

• Security risks are identified early and addressed in a structured, pragmatic way

• The company has clear security ownership, standards, and response processes

• Customers and auditors have confidence in the company’s security posture

• Engineering teams can move quickly with good security guardrails in place

• Incidents, vulnerabilities, and access risks are handled with discipline and urgency