[Hiring] Chief Information Security Officer @UpGuard Inc.

Role Description

This is not a conventional CISO role, and we'd rather say that up front than have you discover it in week three.

• Own the entire enterprise technology stack — security and infrastructure, identity, end user compute, networking, cloud platform, and the technology and physical security services behind our workspaces.
• Security is the substrate, or underlay, for that stack - not a separate function that reviews someone else's work.
• Lead a team - currently nine FTE in size, across four functions: IT Operations, Security Operations, Cloud Platform Engineering and GRC.
• Report directly to the CEO, with a defined transition period alongside the outgoing CISO.

What will you do?

• Own the full technology and security remit.
• Lead and grow three functions: IT & Security Operations, Cloud Platform Engineering, and GRC.
• Mature security operations by building detection, analytics, orchestration and response capability.
• Own identity end to end across our GCP project estate.
• Own the network and cloud perimeter with ZTNA as the strategic access model.
• Own end user compute globally with a predominantly macOS fleet.
• Own the workspaces, including technology and physical security services for our offices.
• Own the compliance program, including SOC-2 Type II and ISO 27001.
• Be customer zero, using our own platform to its full extent.
• Communicate at executive level, briefing the executive team, Steering Committee, and the Board.

Qualifications

• Track record of building and operating technology at scale, with security layered over it.
• Infrastructure and operations foundation, having run a data centre or substantial operations function.
• Process discipline learned in consequential environments.
• Demonstrated ability to do a lot with a little, focusing on automation over headcount.
• Genuine comfort owning infrastructure, security, applications, and identity together.
• Hands-on credibility, able to architect controls and lead incidents.
• Cloud-native depth, with substantial GCP experience preferred.
• Ownership of a compliance program, having carried SOC 2, ISO 27001, or equivalent.
• Ability to absorb context at speed.
• Personal drive that doesn't need to be managed.
• Comfort operating in a fast-paced, high-growth, remote-first environment.

Benefits

• Monthly Lifestyle subsidy for financial, physical, and mental well-being.
• WFH set-up allowance to ensure you have the right environment to work in.
• $1500 USD annual Learning & Development allowance for career development.
• Annual leave including PTO plus two additional UpGuardian leave days.
• 18 weeks paid Parental Leave irrespective of parenting role.
• Personal Leave Allowance including sick & carer’s leave.
• Fully remote working environment.
• Top-spec hardware provided for all team members.
• Generative AI subsidy for access to generative AI tools.