[Hiring] Lead, System Security @Slate Auto

Role Description

We are hiring a Director of Cybersecurity to own security and security compliance across all of Slate. This is a company-wide program, not a corporate IT function. You will set the strategy, roadmap, and standards that protect our people, our data, our factory, our customers, and the truck itself, and you will build the team and partnerships to carry it out.

You will work across every part of the business:

• Corporate IT
• Software engineering
• Enterprise systems
• Manufacturing systems
• Data
• Vehicle engineering
• Legal
• Finance
• External partners

The job is to make security a capability that helps Slate ship faster and with confidence, not a gate that slows it down.

You will inherit early foundations, including a team, a NIST CSF 2.0 self-assessment, a managed detection and response plan, and baseline security policies, and turn them into a mature, measurable program that holds up to auditors, regulators, partners, and the board.

Qualifications

• 10 or more years in information security or cybersecurity, with at least 5 years leading security teams or programs.
• Experience building or substantially maturing a security program across multiple domains, not only a single function such as SOC, GRC, or AppSec.
• Hands-on leadership of compliance efforts against recognized frameworks, including SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171.
• Direct experience securing manufacturing, industrial, or OT environments, or a strong working knowledge of IEC 62443, OT network segmentation, and the operational realities of a production floor.
• Solid technical grounding in cloud security (AWS preferred), identity and access management, application security, and security operations.
• A track record of translating risk into business terms and making pragmatic, prioritized tradeoffs in a fast-moving environment.
• Strong written and verbal communication, including presenting to executives and boards, and a low-ego, collaborative approach to working across departments.

Requirements

• Automotive, EV, or connected product security experience, including ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System.
• Experience standing up security for a greenfield plant, a new company, or a business going through rapid scale-up.
• Consumer ecommerce and payments security, including PCI-DSS scoping and consumer privacy regulations.
• Experience with CMMC, ITAR/EAR, or government and defense contracting requirements.
• Familiarity with securing data platforms and AI/ML or LLM-based applications.
• Industry certifications such as CISSP, CISM, GICSP, or CCSP.
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.

Benefits

• Medical, dental, and vision insurance
• Life insurance
• Disability insurance
• Vacation
• 401k
• Eligibility to participate in the equity program and/or a discretionary annual incentive program

Company Description

At Slate, we’re building safe, reliable vehicles that people can afford, personalize and love—and doing it here in the USA as part of our commitment to reindustrialization. The spirit of DIY and customization runs throughout every element of a Slate, because people should have control over how their trucks look, feel, and represent them.