Head of Information Security

We are looking for a Head of InfoSec Operations to lead the day-to-day execution of our cybersecurity operations, security monitoring, incident response, threat detection, vulnerability management, and client-facing security assurance.

This role will bridge the gap between security strategy and tactical execution. The ideal candidate is hands-on, operationally strong, calm under pressure, and able to work cross-functionally with IT, Engineering, DevOps, Product, Legal, Compliance, Sales, and Customer Success.

In addition to leading internal security operations, this person will serve as a key point of contact for client security questions, customer due diligence, security questionnaires, vendor risk reviews, and enterprise security discussions.

• Lead and continuously improve the company’s security operations function, including monitoring, detection, investigation, response, and remediation.
• Serve as incident commander for major cybersecurity incidents, leading triage, containment, eradication, recovery, and post-incident reviews.
• Own the operational incident response process, including playbooks, escalation paths, communication procedures, and readiness exercises.
• Ensure proper logging, monitoring, alerting, and security visibility across cloud, SaaS, endpoint, network, and application environments.
• Oversee threat detection, threat hunting, security investigations, malware analysis, and forensic response activities.
• Establish and track security operations metrics such as mean time to detect, mean time to respond, alert quality, incident volume, and remediation timelines.
• Conduct tabletop exercises, simulations, and regular readiness reviews to improve incident response maturity.

• Own the vulnerability management program, including scanning, prioritization, remediation tracking, and reporting.
• Coordinate penetration testing, external assessments, and remediation follow-up with Engineering, DevOps, IT, and Product teams.
• Partner with technical teams to identify, assess, and reduce security risks across infrastructure, applications, cloud services, endpoints, and third-party tools.
• Monitor emerging threats, adversary tactics, and relevant attack trends, and translate them into practical defensive improvements.
• Drive remediation of risks that exceed the company’s acceptable risk thresholds.

• Evaluate, implement, manage, and optimize security tools such as SIEM, EDR, SOAR, XDR, vulnerability scanners, cloud security monitoring, identity security tools, and logging platforms.
• Tune detection rules, reduce false positives, and improve the quality and actionability of security alerts.
• Ensure security tooling is properly integrated with IT, DevOps, cloud, identity, and engineering systems.
• Participate in or lead security reviews for new products, services, infrastructure changes, and vendor technologies.
• Maintain consolidated visibility across security data sources and ensure the company has an effective daily security watch function.

• Serve as the primary point of contact for client security inquiries, security questionnaires, due diligence requests, and customer security reviews.
• Participate in client security calls, vendor risk assessments, procurement reviews, and enterprise customer security discussions.
• Partner with Sales, Customer Success, Legal, Compliance, Product, Engineering, and IT to address client security concerns accurately and efficiently.
• Translate technical security controls, risks, and remediation plans into clear, client-appropriate explanations.
• Maintain reusable, approved responses and documentation for common client security topics, including data protection, encryption, access control, incident response, vulnerability management, business continuity, cloud security, and compliance.
• Support customer-facing security communications during major incidents, material security events, audits, or significant security posture changes.
• Identify recurring client security concerns and translate them into improvements in controls, processes, documentation, and internal security maturity.

• Support compliance audits, risk assessments, and security reporting requirements, including SOC 2, ISO 27001, NIST, HIPAA, or other relevant frameworks.
• Provide security evidence, operational metrics, and control documentation for audits and customer reviews.
• Develop clear executive reporting on security posture, incidents, operational performance, key risks, and remediation progress.
• Help define and maintain security policies, standards, procedures, and operational playbooks.
• Work with leadership to ensure security operations align with business goals, regulatory expectations, and customer commitments.

• Lead, mentor, and scale a high-performing team of security engineers, analysts, and external security partners.
• Set clear priorities, operating rhythms, performance expectations, and development plans for the security operations team.
• Partner closely with IT, DevOps, Engineering, Product, Legal, Compliance, Sales, and Customer Success to manage risk without slowing down the business unnecessarily.
• Build a culture of accountability, responsiveness, continuous improvement, and practical security execution.
• Act as a trusted advisor to internal teams on security operations, incident response, client security expectations, and operational risk.

• 8+ years of total experience across cybersecurity, information security, security operations, IT, infrastructure, or related technical fields.
• 3-5+ years of experience in a dedicated security operations leadership, incident response leadership, or security management role.
• Strong hands-on experience with incident response, security monitoring, threat detection, threat intelligence, vulnerability management, and security investigations.
• Experience managing or operating SIEM, EDR, SOAR, XDR, vulnerability management, cloud security monitoring, identity security, or related security platforms.
• Experience securing cloud environments such as AWS, Azure, or GCP.
• Strong understanding of modern attack vectors, adversary tactics, techniques, and procedures, including frameworks such as MITRE ATT&CK.
• Familiarity with security and compliance frameworks such as NIST, ISO 27001, SOC 2, CIS Controls, OWASP, SANS, SSAE, ITIL, or similar standards.
• Experience creating security operations metrics, dashboards, executive reports, and remediation tracking processes.
• Strong written and verbal communication skills, with the ability to explain technical security issues to executive, technical, and non-technical audiences.
• Ability to remain calm, structured, and decisive during high-pressure security events.

• Experience responding to enterprise security questionnaires, vendor risk assessments, customer audits, and client due diligence requests.
• Ability to represent the security function in customer-facing meetings, procurement discussions, and executive-level security reviews.
• Strong judgment in balancing transparency with confidentiality when discussing security controls, incidents, vulnerabilities, and internal processes with external parties.
• Familiarity with common customer security review topics, including data privacy, encryption, access management, incident response, vulnerability management, cloud security, business continuity, SOC 2, and ISO 27001.
• Ability to create clear, accurate, reusable security documentation and approved responses for client-facing use.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent practical experience.
• Security certifications such as CISSP, CISM, GCIH, GCIA, CRISC, ISSAP, OSCP, or similar.
• Experience leading or working with a 24/7 SOC or managed security service provider.
• Experience in a SaaS, cloud-native, enterprise software, fintech, healthcare, AI, or regulated technology environment.