[Hiring] Information Security Lead @Acquisition.com

Role Description

The Information Security Lead exists to make security an operating discipline across ACQ, with clear ownership for information security operations, incident readiness, risk, and the ongoing operation of ISO 27001 and ISO 42001.

ACQ holds data from thousands of client businesses and uses AI across its products and internal operations. We've established foundational identity controls, and we're moving from certification readiness into the daily work of keeping our management systems effective, our risks visible, and our response capabilities ready.

This is a hands-on, founding information security role with its deepest ownership in GRC and security operations. You will:

• Build repeatable operating systems.
• Lead investigations.
• Provide an independent view of risk.
• Review application and infrastructure code.
• Understand attack paths.
• Work with engineering owners on practical code remediation.

You will report to the IT Systems Manager, partner daily with platform, application, and AI engineering, collaborate with Legal on privacy, and work with the CTO as an executive sponsor of the function.

Qualifications

• 7+ years of information security experience, including experience operating ISO 27001 programs.
• Active CISSP certification, or eligibility and commitment to obtain it within six months of hire, is required; ISO 42001 and CGRC experience are preferred.
• Experience remediating security incidents, including practical experience building logging, monitoring, and detection capabilities.
• Ability to read and write code, ideally in Python and JavaScript/TypeScript, to identify potential attack paths, assess vulnerabilities, and recommend code-level fixes.
• Proficiency with infrastructure-as-code tools such as Pulumi or Terraform, cloud IAM, and deployment workflows.
• Knowledge of AI and agentic systems, with experience establishing practical security controls for their use.
• Experience serving as a foundational or sole information security owner is highly preferred.

Requirements

• ISO 27001 and ISO 42001 operate on a continuous cadence, with current evidence, tested controls, reviewed risks, and corrective actions ready for surveillance audits.
• Security signals are centralized and actionable, incident procedures are rehearsed, investigations are handled with clear ownership, and lessons produce verified control improvements.
• Leadership receives a plain-language quarterly view of material risk, overdue remediation, control effectiveness, accepted exceptions, and the decisions or investment required.
• Privileged access is reviewed quarterly, identity lifecycle controls are auditable, critical vendors are assessed before receiving company data, and data-handling expectations are implemented in the systems that matter.
• Application and cloud findings have named engineering owners and deadlines, technical reviews happen early enough to change designs, and remediation is validated rather than closed on assertion.
• AI systems have a current inventory, defined owners and access boundaries, completed impact assessments, traceable activity, tested shutdown controls, and a prioritized plan for scaling the information security function.

Schedule

• Full-time, standard Pacific Time business hours, Monday through Friday.
• Flexibility to support security incidents and critical business needs.

Location

• Remote, USA.
• Some travel to Las Vegas will be required.

Compensation

$200,000-$225,000 base salary. The salary range may be inclusive of several levels applicable to the position. Final salary will be based on a number of factors including level, relevant prior experience, skills, and expertise. This range is inclusive of base salary only and does not include benefits.

Benefits

• Flexible Unlimited Paid Time Off and Company-wide Holidays.
• Employer sponsored Medical, Dental, & Vision plans.
• $1,950 annual Employer HSA contribution.
• FSA options including dependent care.
• Employee assistance program and mental health resources.
• Employer match program for 401(k), eligible for both Traditional and Roth accounts.
• $1,200 annual wellness reimbursement through JOON that supports health, family care, pet care, fitness, and more!
• For local or visiting team members, enjoy access to a state of the art gym at our HQ in Las Vegas.