Director of Information Security

📋 Description

• Lead security program protecting our platform and customer data.
• Own SOC 2 Type II and ISO 27001 programs and audits.
• Manage incident response lifecycle from detection to post-mortem.
• Conduct ongoing risk assessments and report posture to leadership.
• Oversee access governance and enforce least privilege.
• Define AI governance and security training for staff.

🎯 Requirements

• 5+ years in information security, with at least 2 in leadership.
• Proficiency with AI tools like Claude Code.
• Deep familiarity with SOC 2, ISO 27001, GDPR, CCPA.
• Experience owning incident response end-to-end in SaaS or cloud-native.
• Comfortable in customer-facing settings and articulate security posture.
• Hands-on with identity management (Okta), MDM, DLP, and cloud security tools.

🎁 Benefits

• Unlimited vacation; recommend taking at least 3 weeks per year.
• Competitive compensation package including stock options.
• Fully remote team; choose where you live.
• Work from home stipend to set up your home office.
• Apple laptops provided for new employees.
• Training and development budget for every employee.