Head of Security

We're hiring a security leader who doesn't manage from a distance. Someone who rolls up their sleeves, builds programs that actually work, and earns trust across engineering by being a genuine partner, not a gatekeeper.

Reporting to the CFO, you'll lead a high functioning, global team spanning the U.S. and South Korea, with end to end ownership of Security, IT, and Compliance. You're inheriting a world class program, already SOC 2, HIPAA, ISO 27001, and ISO 42001 compliant, and your job is to take it further: deepen the security culture, sharpen the compliance frameworks, and keep pace with an AI first business.

You'll also own global IT Operations, including infrastructure, networks, and systems, as the executive responsible for safeguarding the growing use of AI internally and across the product.

This is a player coach, hands on builder role. Not a talking head role.

• Have built and run security programs at a B2B SaaS or cloud company, not just inherited them
• Can walk an engineer through a threat model and a CFO through a risk summary, without losing either one
• Know your way around ISO 27001, SOC 2, HIPAA, and GDPR
• Have led or mentored a global security team and take real pride in developing people
• Thrive in ambiguity and build structure where none existed
• Default to fixing, documenting, and improving, not assigning blame
• Treat security as an ongoing conversation with the business, not a monologue at it
• Are already using AI tools to work faster, and thinking about what that means for security programs

• 10+ years of combined experience across security management, IT operations, compliance, or consulting
• 3+ years leading or managing a security/IT team
• Hands on experience with ISO 27001, SOC 2, and/or HIPAA/GDPR audits
• A background in global B2B, SaaS, or cloud based businesses
• A track record of managing security incidents end to end
• Strong understanding of the security and compliance challenges unique to AI/LLMs
• A bachelor's degree in Information Security, Computer Science, MIS, or a related field

• CISM, CISA, CISSP, or equivalent certification
• Experience operating across multiple time zones and regulatory environments