[Hiring] Head of Security & Compliance @Unleash

Role Description

As Head of Security & Compliance, you will be the first person to own security and compliance at Unleash as a dedicated function. This is a hands-on, individual contributor leadership role, you are the first and only dedicated security and compliance hire today, which means you will set direction, do the work, and act as the trusted voice on security for customers, leadership, and the rest of the organization.

This is a rare kind of opportunity. Most people in this field inherit an existing program built by someone else. Here, you get to define what "good" looks like at Unleash, backed by a leadership team that wants a real risk-based partner, not someone to rubber-stamp policy.

Responsibilities

• Own and build the framework
• Define what must be documented and how, and prepare board-level updates on our threat landscape and risk posture
• Build out our approach to prioritizing security and compliance work across the company, working closely with our Head of Engineering
• Own customer & contract trust end to end
• Take full ownership of pre-sale security reviews and post-sale escalations from customer security teams, work currently split between several people
• Own contract and compliance reviews in the sales process, including the trade-off calls this requires
• Own compliance & audit processes
• Own passing our annual SOC 2 audit, and our ongoing compliance monitoring via Vanta
• Own GDPR and data mapping from the ground up, and shape our path toward ISO 27001 if we decide to pursue it
• Build what does not exist yet
• Establish our first written AI usage policy, and define what counts as customer data versus data we hold about our customers
• Build out third-party and vendor risk management as a proper, owned process

Qualifications

• Experience from a fast-moving, B2B SaaS environment, ideally having sold software-as-a-service to other companies
• Real ownership of audits or compliance processes in a larger organization at some point, alongside experience in a smaller, less structured environment
• Enough technical understanding to grasp our overall security picture and ask the right questions, without needing to be hands-on at implementation
• A pragmatic, risk-based mindset, and are energized rather than discouraged by ambiguity and a blank page
• Ability to communicate credibly with security teams at large enterprise customers

Requirements

• Hands-on ISO 27001 experience
• Practical GDPR and data mapping experience
• Experience with, or clear opinions on, AI/LLM data handling policy
• Familiarity with automated compliance monitoring tools such as Vanta
• Cloud-native understanding, ideally of AWS

Benefits

• The rare chance to build and own a security and compliance function from scratch, not inherit someone else's
• Work directly with our Head of Engineering in shaping how Unleash approaches risk and trust as we scale
• Real ownership over the systems, policies, and processes you build
• Flexible, remote-first working environment
• Two company off-sites per year, where the whole team meets in European cities
• Everything you need to do your best work

Interview Process

• Video interview with a recruiter
• Manager interview (meet and greet)
• Case study (Completed at home)
• Squad interview with your future colleagues, and walk-through of the case study
• Personality test and interview with recruiter
• Job offer

If this opportunity sparks your interest, please apply with your CV and a detailed LinkedIn profile. If you would like to learn more about the position, feel free to reach out to Erlend Sletvold at [email protected].