Founding Information Security Lead
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Founding Information Security Lead owning security, compliance, and IT operations for Flodesk’s email marketing platform. Building SOC 2, ISO 27001, and CCPA readiness.
Responsibilities:
- Own Flodesk's security program, including policies, controls, governance, and long-term maturity planning
- Collaborate cross-functionally to embed security into product, operational, and technology decisions
- Maintain privacy-related security practices for data handling, retention, and customer commitments
- Lead SOC 2, ISO 27001, and CCPA readiness, audits, evidence collection, and continuous compliance
- Partner with engineering on security architecture, development workflows, release processes, and security foundations across cloud infrastructure, applications, data, and internal systems
- Evaluate, implement, and maintain security tooling and automation
- Own security incident management end to end
- Design, implement, and continuously improve controls
- Track and report security posture, program maturity, and compliance status
- Defend Flodesk's SaaS platform and customers with protective mechanisms and security capabilities
- Manage company hardware lifecycle from procurement to retirement
- Provide first-line IT support for hardware, software, and network connectivity
- Run new-hire account setup, device provisioning, and secure access revocation for leavers
- Manage domain registrations, DNS, and general IT housekeeping
- Vet new tools for SSO, 2FA, and integration capabilities
- Maintain a registry of approved software
Requirements:
- 10+ years in information security, with a track record of building or maturing security programs
- 3+ years in an information security leadership role
- Strong foundation in cloud security, identity governance, vulnerability management, and incident response
- Proven experience aligning security and privacy practices with GDPR
- Comfortable partnering directly with engineering on product security and secure development practices
- Clear, confident communication with technical and non-technical stakeholders
- Can-do attitude, flexibility, and willingness to occasionally handle basic tasks
- Willingness to travel on a semiannual basis
- Experience securing SaaS products is an advantage
- Experience implementing SOC 2, ISO 27001/2, or similar frameworks is an advantage
- Background in reliability, DevOps, or application architecture is an advantage
- Conversational or better Vietnamese is an advantage
Benefits:
- Fully paid health insurance for individual coverage
- 16 weeks paid parental leave for non-birthing parents
- 22 weeks paid maternity leave for birthing parents
- Unlimited flexible time off
- 401k match (US employees only)
- $1,000 annual stipend for learning and development
Similar Jobs
Cybersecurity Consultant
Consultant cybersécurité chez Wavestone, cabinet international accompagnant les transformations stratégiques. Intervention sur gouvernance, cloud, audits, risques et sécurité des systèmes.
Cybersecurity Architect
Cybersecurity Architect leading RMF, risk mitigation, and ATO efforts for DoD Zero Trust systems. GDIT delivers technology and mission services to U.S. government, defense, and intelligence agencies.
Senior Security Agent / AI Red Team Engineer
AI red-team engineer attacking PGTEK agents and converting findings into durable controls. Supporting secure Federal and DoD systems through threat modeling, remediation, and authorization activities.
Software Security Lead
Software Security Lead securing Cisco’s enterprise IT and Operations platforms across applications, cloud, identity, data, and AI. Leading threat modeling, architecture reviews, risk remediation, and security metrics.
Staff Security Researcher
Staff Security Researcher conducting vulnerability research and penetration testing for GitLab’s AI-powered DevSecOps platform. Developing attack methodologies, tooling, and security improvements.
Software Security Lead
Cisco software security lead securing AI-enabled enterprise platforms and applications. Leading threat modeling, architecture reviews, risk remediation, and portfolio security metrics.
Principal Security Researcher
Principal Security Researcher securing GitLab’s AI-powered DevSecOps platform. Leading vulnerability research, AI attack analysis, penetration testing, and remediation across GitLab’s codebase.
Application Security Remediation Engineer
Application Security Remediation Engineer remediating Wiz findings across enterprise applications for Arctiq’s technology services clients. Securing code, dependencies, containers, and DevSecOps delivery pipelines.
Senior Engineer, Information Security Architect
Information Security Architect engineering secure platforms and enterprise designs for Lovesac, a fast-growing adaptable furniture company. Leading Zero Trust architecture, security tooling, integrations, and governance.
Senior Security Engineer – Identity and Access Management
Senior IAM Security Engineer designing automated identity controls for Providence, a comprehensive healthcare organization. Modernizing hybrid identity infrastructure toward Zero Trust and cloud security.
Cybersecurity Engineer
Cybersecurity Engineer managing endpoint, identity, cloud, and enterprise security for Accela’s cloud-based government software platform. Supporting vulnerability management, compliance controls, investigations, and security automation.
Cyber Security Engineer
Cyber Security Engineer securing Emprise Bank through vulnerability management, identity access, DLP, vendor reviews, and incident response. Providing tier 3 security support and leading IT Security projects.
VP of IT and Cybersecurity
VP leading IT and cybersecurity strategy, reliability, and risk for Tidal Financial Group’s ETF investment technology platform. Advising executives and managing teams, vendors, incidents, and compliance.
IT Security Specialist
IT Security Specialist protecting Fika’s rural infrastructure nonprofit systems from cyber threats. Securing networks, cloud environments, endpoints, and compliance operations across global program offices.
Senior Digital Forensics and Incident Response Engineer
Senior DFIR Engineer leading identity-theft investigations and automation for Humana, a U.S. healthcare and insurance company. Supporting enterprise cyber investigations, incident response, and forensic capability development.
Senior Offensive Security Engineer
Senior offensive security engineer testing First Advantage’s products, cloud infrastructure, networks, and people. Building adversary simulations and driving remediation to reduce enterprise risk.
Security Engineer
Security Engineer securing PIP Labs’ DATA Network infrastructure, cloud environment, endpoints, and internal systems. Automating security operations and protecting sensitive real-world data used for AI training.
Senior macOS Engineer – Workforce AI Security
Senior macOS Engineer owning native endpoint security agents for Check Point’s enterprise AI platform. Building TLS interception, proxy controls, and data-loss protections across managed Macs.
IT/OT Security Architect
IT/OT Security Architect designing secure IT, OT, cloud, and AI architectures for Berlin-based cybersecurity consultancy APT-ONE. Translating regulatory requirements into controls and advising CISOs and technical leaders.
Security Captain – Rotational
Security Captain supervising personnel and protective operations at NMS’s remote Alpine oil field. Managing incidents, emergency response, client coordination, and rotational camp operations.