Director, Information Security

Loop is industrializing services through AI, starting with one of the world's most complex industries: the global supply chain. We're an AI-native company built to solve the systemic data problem that's held logistics back for decades. Our Logistics Data Platform turns fragmented, unstructured data into a trusted foundation that fuels automation, financial clarity, and decision intelligence ay, Loop serves >20% of the Fortune 100, manages over $30B in supply chain spend, and helps its clients save hundreds of millions of dollars each year.

We recently closed a $95M Series C and are backed by leading investors including Valor Equity Partners, Founders Fund, 8VC, Index Ventures, J.P. Morgan, and more than 50 industry-leading angel investors.

Our team brings deep expertise from Uber, Google, Microsoft, Meta, Amazon, Flexport, C3 AI, VMware, Box, UPS, and C.H. Robinson and we're looking for builders who want to help shape what comes next.

The Director of Information Security will report to Loop’s CISO and serve as a senior technical and operational leader within the security organization.

You will be responsible for translating Loop’s security strategy into a high-performing security program across security architecture, security operations, incident response, vulnerability management, cloud and application security, identity and access, data protection, and technical security controls.

This is a builder role. You will work closely with Engineering, Product, IT, Legal, and business teams to identify risks, design practical controls, and ensure those controls work in practice — not just on paper.

Loop operates at the intersection of enterprise software, AI, data, and payments. The right person brings the technical depth and rigor expected in financial infrastructure while operating with the speed, judgment, and pragmatism required in a high-growth software company.

This is an in-person role based in San Francisco, Chicago, or New York City with the exception of being in the office 4+ days per week.

• Partner with the CISO to translate Loop’s security strategy into a clear technical roadmap and operating plan.
• Own execution across core information security domains, including security operations, vulnerability management, incident response, identity and access, data protection, security architecture, and third party vendor risk management.
• Bridge technical controls needed to meet compliance and audit requirements.
• Partner with the CTO to ensure Product Security and Dev Sec Ops  integration.
• Establish measurable security objectives, operating metrics, and mechanisms for identifying and remediating risk.
• Continuously improve Loop’s security posture as the company, product, and threat environment evolve.

• Partner deeply with Engineering and Infrastructure to embed security into Loop’s architecture and software development lifecycle.
• Design and implement controls across cloud infrastructure, applications, APIs, endpoints, identity, data, and third-party integrations.
• Conduct and oversee threat modeling, architecture reviews, penetration testing, and technical risk assessments.
• Help teams make thoughtful security tradeoffs without unnecessarily slowing product development.
• Develop security architecture appropriate for increasingly autonomous AI systems, agents, and workflows.

• Build and operate capabilities for monitoring, detection, investigation, containment, and remediation.
• Own vulnerability management from discovery through prioritized remediation.
• Develop and continuously improve Loop’s incident-response processes, tooling, playbooks, and…