[Hiring] Senior Director, Information Security and Compliance @Foundant + smartsimple

Role Description

You'll own and drive the maturity of Foundant's information security and GRC program end to end — setting the strategic roadmap that protects the trust our clients place in us across five products and every region we serve.

• Lead and develop our Head of Technical Security and Head of GRC, aligning both teams around a shared vision for reducing risk and building a security-first culture across the organization.
• Serve as Foundant's executive voice during security incidents, communicating clearly and confidently with clients, leadership, and regulators.
• Build and mature Foundant's GRC program — policies, risk registers, control frameworks, and audits (e.g., SOC 2, ISO 27001) — ensuring compliance across US, Canadian, European, UK, and Australian regulatory requirements.
• Partner closely with Product and Engineering leaders to embed security and privacy by design into all five product lines.
• Develop and present security and compliance metrics to executive leadership and the Board, translating technical risk into business impact and clear priorities.
• Own third-party and vendor risk management, ensuring our extended ecosystem meets the same standard of care we hold ourselves to.
• Represent Foundant's security posture to clients and prospects during enterprise sales cycles, security reviews, and due-diligence questionnaires.
• Other duties as assigned.

Qualifications

• 8+ years of progressive leadership experience in information security and/or governance, risk, and compliance (GRC), including experience leading both technical security and compliance functions.
• Demonstrated experience building or maturing a security and compliance program for a multi-product SaaS company.
• Experience navigating international regulatory and compliance frameworks (e.g., GDPR, UK GDPR, Australian Privacy Act, SOC 2, ISO 27001).
• Experience leading security incident response programs, including experience serving as a public-facing or client-facing spokesperson during incidents.
• Experience managing and developing senior technical and compliance leaders.
• CISSP, CISM, or CRISC preferred, but not required.
• No specific degree requirement — equivalent professional experience is accepted.
• Must be legally eligible to work in the United States.

Requirements

• Strategic Thinking: Translates Foundant's North Star into a multi-year security and compliance roadmap that scales across five product lines and every region we operate in, adapting the plan as regulatory and threat landscapes shift.
• Decision-Making: Makes fast, values-aligned calls under pressure — especially during security incidents — using evidence and risk data to protect clients and the business while keeping leadership clearly informed.
• Change Management: Leads with calm, direct communication during incidents and organizational change alike, serving as a steady and credible voice for clients, regulators, and internal teams when it matters most.
• Staff Development: Coaches the Head of Technical Security and Head of GRC to grow as leaders in their own right, giving them the feedback, autonomy, and visibility to build strong teams beneath them.
• Collaboration and Learning: Builds trusted partnerships with Product, Engineering, and Legal leaders across a global organization, and stays ahead of an evolving threat and regulatory landscape by continually learning and sharing insight with the team.

Benefits

• At the heart of everything we do is a commitment to innovation and making a positive impact.
• Competitive salary and benefits, including tuition and lifestyle reimbursements, and bespoke mindfulness and fitness initiatives.
• Flexible PTO policy, allowing you to manage your time in a way that supports your personal well-being and professional success.
• Opportunities for professional and personal development, with exposure to diverse ideas, expertise, and projects that span multiple industries.
• Support for internal mobility to help you achieve your career goals.
• Autonomy and responsibility, empowering you to approach your work creatively and independently.
• Employee recognition is a core part of our culture.
• Equal opportunity employer, committed to building a diverse workforce.
• Commitment to providing accommodations throughout the interview and employment process.