Accountabilities:

Security Strategy and Roadmap

Lead security and compliance initiatives across research and development, proactively identifying risks, evaluating existing controls, and recommending improvements.
Develop, maintain, and execute the platform security roadmap, prioritizing initiatives based on risk exposure, business objectives, and enterprise security requirements.
Establish security priorities and make informed technical decisions within organizational policies and governance frameworks.
Assess security risks, communicate potential impacts, recommend mitigation strategies, and escalate significant concerns with clear, actionable proposals.
Drive continuous improvements in security architecture, policies, and engineering practices.

Security Compliance and Audit Management

Lead security compliance activities and maintain alignment with relevant industry standards and enterprise requirements.
Own SOC 2 audit readiness, coordinating control implementation, evidence collection, auditor interactions, and remediation of identified findings.
Ensure security controls are consistently implemented, documented, monitored, and maintained across the platform.
Collaborate with internal stakeholders to address compliance gaps and strengthen governance processes.
Monitor evolving security and compliance requirements and translate them into practical engineering initiatives.

Security Incident Response and Risk Management

Own and continuously improve security incident response policies, ensuring alignment with enterprise procedures, escalation requirements, and response expectations.
Establish and maintain effective incident management processes to support timely identification, escalation, investigation, and resolution of security incidents.
Review incident response procedures regularly to ensure they remain relevant, effective, and operationally actionable.
Provide guidance to engineering and business teams on security risks, incident handling, and remediation priorities.

Security Engineering and Tooling

Evaluate, recommend, select, and implement security tools that strengthen application security, vulnerability management, dependency monitoring, and cloud security.
Partner with engineering teams to ensure software dependencies remain current and security vulnerabilities are addressed promptly.
Integrate security scanning, vulnerability assessments, and software license checks into development workflows and CI/CD pipelines.
Promote secure software development practices and ensure security considerations are incorporated throughout the engineering lifecycle.
Monitor the effectiveness of implemented security technologies and identify opportunities for further optimization.

Cross-functional Leadership and Collaboration

Work closely with engineering, infrastructure, business, and enterprise security teams to establish accountability and drive security initiatives through completion.
Influence technical decisions and promote a proactive security culture across development teams.
Communicate complex security concepts, risks, recommendations, and technical trade-offs clearly to both technical and non-technical stakeholders.
Balance security requirements with engineering effort, operational constraints, and business priorities.
Take ownership of strategic security projects while operating effectively in an environment that requires independent judgment and initiative.

Requirements

At least 7 years of professional experience in security engineering, application security, cloud security, or comparable technical security roles.
Demonstrated experience supporting and securing SaaS products, with a strong understanding of cloud-based application environments.
At least 3 years of experience owning a security strategy or security program, including independently identifying security gaps, developing recommendations, making technical decisions, and delivering measurable improvements.
Proven ability to balance security risks, engineering resources, and business priorities while making sound decisions in complex or ambiguous situations.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1