Manager of InfoSec and Compliance - Remote

Overview

We’re looking for a hands-on, strategic security leader to own and evolve our security function from the ground up. In this role, you won’t just manage security—you’ll define it. You’ll drive cross-functional initiatives, embed scalable compliance practices, and ensure our security posture stays ahead of emerging threats. If you thrive on autonomy, crave impact, and are excited by the challenge of building and leading a world-class security program in a high-growth startup, we want to hear from you.

In Short

• Own the security function and lead strategy, execution, and representation across internal and external stakeholders.
• Drive security and compliance efforts across Engineering, DevOps, IT, Legal, and Sales.
• Operate with autonomy to shape the security roadmap and manage incidents.
• Lead and manage compliance programs, ensuring audit readiness.
• Design secure infrastructure practices in collaboration with DevOps and Engineering.
• Conduct and manage penetration testing and oversee vulnerability tracking.
• Plan and run cross-functional security tabletop exercises.
• Implement and maintain Security Posture Management best practices.
• Maintain and evolve security policies and governance frameworks.
• Lead incident response processes from triage to resolution.

Requirements

• 6+ years in Information Security, with 2+ years in a leadership role.
• Experience in small startups and scaling security programs.
• Proven experience leading compliance efforts and managing audits.
• Experience with Security Posture Management practices and tools.
• Familiarity with SOC 2 Type II, GDPR, CCPA, and cloud-native security.
• Hands-on experience with Azure security services and tools.
• Preferred certifications: CISSP, CISM, CEH, or equivalent.

Benefits

• Flexible Paid Time Off
• Health Insurance
• Dental Insurance
• Vision Insurance
• 401K Match