Head of Security

We're hiring a security leader who doesn't manage from a distance. Someone who rolls up their sleeves, builds programs that actually work, and earns trust across engineering by being a genuine partner, not a gatekeeper.The RoleReporting to the CFO, you'll lead a high functioning, global team spanning the U.S. and South Korea, with end to end ownership of Security, IT, and Compliance. You're inheriting a world class program, already SOC 2, HIPAA, ISO 27001, and ISO 42001 compliant, and your job is to take it further: deepen the security culture, sharpen the compliance frameworks, and keep pace with an AI first business.You'll also own global IT Operations, including infrastructure, networks, and systems, as the executive responsible for safeguarding the growing use of AI internally and across the product.This is a player coach, hands on builder role. Not a talking head role.You might be a fit if you:Have built and run security programs at a B2B SaaS or cloud company, not just inherited themCan walk an engineer through a threat model and a CFO through a risk summary, without losing either oneKnow your way around ISO 27001, SOC 2, HIPAA, and GDPRHave led or mentored a global security team and take real pride in developing peopleThrive in ambiguity and build structure where none existedDefault to fixing, documenting, and improving, not assigning blameTreat security as an ongoing conversation with the business, not a monologue at itAre already using AI tools to work faster, and thinking about what that means for security programsWhat you'll need:10+ years of combined experience across security management, IT operations, compliance, or consulting3+ years leading or managing a security/IT teamHands on experience with ISO 27001, SOC 2, and/or HIPAA/GDPR auditsA background in global B2B, SaaS, or cloud based businessesA track record of managing security incidents end to endStrong understanding of the security and compliance challenges unique to AI/LLMsA bachelor's degree in Information Security, Computer Science, MIS, or a related fieldNice to have:CISM, CISA, CISSP, or equivalent certificationExperience operating across multiple time zones and regulatory environments