Head of Security

as the Head of Security, where you'll be responsible for defining and driving our security roadmap, managing our security function, navigating risks, ensuring regulatory compliance, and delivering a safe and secure product to our customers. You'll report to the Senior Director of Infrastructure Engineering and work closely with leaders across various departments. This strategic and technical role requires scaling your impact across AI tools, team leadership, cross-functional partnerships, and individual contributions.

Responsibilities

• Définir et piloter la feuille de route de sécurité de l'entreprise, gérer la fonction de sécurité et naviguer dans les risques.
• Diriger le recrutement et le développement des ingénieurs en sécurité, du personnel GRC et des partenaires SOC.
• Assurer la conformité réglementaire et la gestion des risques, y compris l'expansion du cadre de contrôle avec des preuves automatisées.
• Owned company-level security strategy, budget, and outcomes end-to-end at a fast-paced technology company
• Presented to and worked directly with a Board or Audit Committee, and with external auditors, regulators, or QSAs
• Hands-on history in at least two of: application / product security, infra security, detection & incident response, enterprise IT & identity, and GRC

Requirements

• Strong track record hiring security professionals and developing engineers into technical and people leaders
• Proven success supporting fast-paced software development teams at scale

Preferred

• Direct professional experience with and notable outcomes from driving AI transformation in security, engineering, and/ or IT organizations

• 10+ years in security, including 4+ years leading a security function or major pillar, and experience managing managers/directors and senior technical leaders (Staff+)
• Experience with security risk quantification, acceptance, and translating technical risk into business impact for executive decision-making
• Stood up or scaled a GRC program: control frameworks, evidence automation, policy, and privacy program management. Experience with frameworks such as SOX, GDPR, PCI, SOC2, and/or ISO27001