VP of Information Security

We're helping a financial services SaaS client in Atlanta hire a dedicated security leader. They need someone to own the big picture for their InfoSec function: strategy, tooling, and governance that can scale as the company grows. This is a true build role for someone who wants to shape a program from the ground up, with a direct line to the CTO and real visibility at the executive level.This role is hybrid with a 3 days on-site, 2 days remote schedule.What you'll do:Own the security policies and control framework, aligned to a recognized standard (NIST CSF, ISO 27001, or similar) so it maps cleanly across SOC 2 and client requirementsSet the roadmap for security tooling — endpoint, cloud, identity management, network monitoring — and manage the vendors behind itOwn the SOC 2 certification process end to end, working directly with auditorsManage client and prospect security questionnaires and due-diligence, building a scalable process instead of answering each one from scratchBuild out the company's approach to AI security and risk, covering both internal tool use and AI features in the productOwn the incident response plan and lead the response if something happensDirectly manage a Security Analyst; report to the CTO and periodically to the CEO/boardWhat we're looking for:8+ years in information security, with 2–3+ years leading a security programDirect experience taking a company through SOC 2 Type II with external auditorsComfortable directing a modern security stack, not just monitoring itExperience handling client security due-diligence in a B2B SaaS environmentStrong communicator, able to represent security to clients, auditors, and executivesNice to have:CISSP, CISM, or CCSPExperience scaling a security function at a similarly sized companyFamiliarity with AI security frameworks (OWASP, NIST AI RMF)