Head of InfoSec and IT Ops

What you'll do

• Establish the enterprise security strategy, risk appetite, policy framework, and executive reporting metrics.
• Define and manage the operational boundaries between product security and corporate IT infrastructure.
• Build a global IT operations model covering identity, endpoint management, SaaS, and automated service delivery.
• Develop detection and response capabilities including threat telemetry, 24/7 incident response, and remediation exercises.
• Manage GRC requirements for SOC 1, SOC 2, ISO 27001, and upcoming public company controls.
• Secure internal AI tools and business applications by defining risk tolerance and governance frameworks.
• Mature identity and access management (EIAM) including privileged access, data protection, and encryption.
• Hire and develop a high-performing team to manage security and IT operations at scale.

What we're looking for

• 12+ years across information security, security engineering, IT engineering/operations, risk, or related disciplines.
• 5+ years leading teams in a high-growth B2B SaaS company.
• Experience owning an enterprise security program and partnering with Product and Engineering teams.
• Demonstrated leadership of incident response, vulnerability management, identity, endpoint/SaaS, cloud, and secure SDLC programs.
• Practical experience with SOC 1/2, ISO 27001, privacy obligations, customer assurance, and audit remediation.
• Experience scaling IT service delivery through automation, self-service, and clear SLOs.
• Ability to influence executives and engineering leaders while making technical decisions regarding architecture and data flows.
• AI-forward knowledge of LLM risks, prompt injection, and governance (preferred); CISSP/CISM or other certifications (preferred).