VP of Information Security

VP of Information Security (JN - Denver, Colorado

We are seeking a senior security leader to own and evolve our enterprise information security strategy, program, and culture. This executive will serve as the top security leader for a high-growth SaaS organization, partnering closely with executive leadership, engineering, and product teams to protect customer data, enable secure product innovation, and scale a world-class security function.

Department:
Full‑time, Direct Hire. Salary ranges $200k - $250k + 30% bonus.

• Define and execute a multi-year security roadmap aligned to business goals and growth
• Serve as the primary advisor to executive leadership on cyber risk, security posture, and investments
• Lead and scale a high-performing security organization across Security Operations, GRC, Application Security, and Cloud Security
• Drive a company-wide security‑first culture through education, accountability, and leadership alignment
• Translate complex technical risk into clear business impact for executive and board‑level stakeholders
• Establish governance around emerging risks including AI security and data protection

• Secure a cloud‑native SaaS platform across AWS, Azure, or GCP environments
• Partner with Engineering and Product to embed security into the SDLC and development lifecycle
• Oversee IAM, Zero Trust architecture, encryption, and cloud security posture management
• Define security standards across APIs, microservices, containers, and third‑party integrations

• Own the information security management system, risk register, and policy framework
• Lead SOC 2 Type II, PCI DSS, and other regulatory and compliance initiatives such as ISO 27001, GDPR, and CCPA
• Support enterprise sales through security reviews, customer questionnaires, and trust programs
• Build and manage third‑party risk and vendor security programs

• Lead a mature security operations capability including SIEM, EDR, and threat intelligence
• Own incident response, business continuity, and disaster recovery programs
• Provide ongoing executive visibility into threat landscape and risk posture

• 12+ years of progressive experience in information security, including 4+ years in a VP, CISO, or equivalent leadership role
• Proven experience leading security within a B2B SaaS or cloud‑native organization is required
• Deep expertise in cloud security, modern threat detection, and secure software development practices
• Strong track record with SOC 2, PCI, and enterprise compliance programs
• Experience building and scaling security teams in high-growth environments
• Exceptional ability to communicate with executive leadership and board members

• Background in the SaaS industry is required
• Bachelor’s degree in a STEM field such as Computer Science, Information Systems, Cybersecurity, or a related discipline is required
• Advanced degree or MBA preferred
• Industry certifications such as CISSP, CISM, CCSP, or CISA are a plus