[Hiring] Chief Information Security Officer @Ent

Role Description

We are seeking a hands-on Chief Information Security Officer to build and lead Ent's internal security program as we scale. You will own the security of our people, systems, infrastructure, product development environment, and company data. You will work closely with our founders and leaders across Engineering, Product, Legal, People Operations, IT, and Go-to-Market to make clear, risk-based decisions and earn the trust of large enterprise and government customers.

This is an internal security leadership role with meaningful customer-facing responsibility. Because Ent is building AI-native endpoint security, you will need deep technical credibility, strong operating judgment, and the ability to turn high security standards into practical controls that protect the company without slowing the team down. You will set the strategy, personally drive the highest-priority work, and build the team and operating model Ent needs for its next stage.

What You’ll Achieve

• Set Ent's company-wide security strategy and roadmap, with priorities, ownership, and measurable outcomes that reflect our stage, risk profile, and customer commitments.
• Serve as a hands-on security leader. Personally drive critical assessments, control design, remediation, and incident work while building a focused internal team and using outside partners where they add leverage.
• Own security risk across identities, employee endpoints, SaaS applications, cloud infrastructure, company data, the software supply chain, and third-party vendors.
• Partner with Engineering and Product to embed security into architecture and the software development lifecycle, including threat modeling, secure design reviews, vulnerability management, secrets and dependency management, logging, monitoring, and remediation.
• Establish and continuously improve core controls for identity and access management, device security, privileged access, data protection, configuration management, and employee onboarding and offboarding across Ent's cloud-first environment.
• Build and lead incident response, including detection and escalation processes, investigation, containment, communications, tabletop exercises, post-incident reviews, and improvements to business continuity and disaster recovery.
• Lead Ent's security assurance and compliance program. Translate requirements from frameworks and programs such as SOC 2, ISO 27001, FedRAMP, and customer-specific standards into durable controls, with clear judgment about what Ent needs now and what can come later.
• Own customer and partner security diligence, including questionnaires, audits, penetration tests, security reviews, and security commitments in contracts. Partner with Legal and Go-to-Market to respond accurately and efficiently.
• Create clear, usable policies and security education that help employees make good decisions, including guidance for sensitive data, approved AI tools, and emerging risks from AI agents and automation.
• Use Ent's product internally as part of the company's security program and provide structured feedback to Product, Engineering, and Research based on real operating experience.
• Give the executive team and board a clear view of Ent's risk, readiness, incidents, and investment priorities, and represent Ent credibly in strategic customer security conversations when needed.

Qualifications

• Experience operating at CISO, Deputy CISO, Head of Security, or equivalent scope in a high-growth technology company. Experience building a security program during an early stage of growth is strongly preferred.
• Deep technical understanding of cloud, identity, endpoint, application, product, and infrastructure security. You can engage directly with engineers on architecture, threat models, control implementation, and remediation.
• Experience securing cloud-first environments and modern identity and device ecosystems, including platforms such as AWS, Azure, or GCP; Google Workspace or Microsoft Entra ID; and macOS and Windows device management.
• Strong command of incident response, vulnerability management, security monitoring, third-party risk, data protection, and secure software development practices.
• Experience building and maintaining security assurance or compliance programs such as SOC 2, ISO 27001, or FedRAMP, and supporting the diligence requirements of sophisticated enterprise or government customers.
• A current understanding of security risks created by AI systems, employee use of generative AI, autonomous agents, sensitive data flows, and rapidly changing development tools.
• Sound risk judgment and a practical operating style. You know when to insist on a control, when to accept or escalate risk, and how to design a solution the organization can sustain.
• The ability to move comfortably between strategy and execution. You are willing to investigate an issue, review a design, write or refine a policy, answer a customer question, and establish a longer-term program.
• Strong communication skills with technical teams, executives, board members, customers, auditors, and partners. You explain risk clearly, without relying on fear or unnecessary complexity.
• A low-ego, highly collaborative approach and the ability to build trust across functions while holding a high bar for security and accountability.

Benefits

• Distributed workplace. While we have positions we hire for in our SF office, we also hire remotely across North America.
• Own a piece of the journey. Every teammate gets meaningful equity on top of their salary.
• We’ve got you covered. 90% of your medical, dental, and vision is paid by Ent. We also cover 75% for your dependents.
• Take the time you need. Our flexible PTO lets you recharge, travel, or just take a breather.
• Family matters. 12 weeks of fully paid maternity leave (birth, adoption, or foster) and 8 weeks fully paid paternity leave.
• Live well. A $100 monthly lifestyle account to spend on what keeps you healthy and happy — fitness, wellness, learning, and more.
• Set up your space. A $500 home office stipend when you join as a remote employee.