Lead, System Security

Vaga não está no LinkedIn

🕒 Outubro 8

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $144.122 - $240.204 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Slate Auto

SiteLinkedInTodas as Vagas

201 - 500 funcionários

🚘 Automotivo

🏭 Manufatura

🚗 Transporte

Automotive • Manufacturing • Transport

A Slate é uma plataforma SaaS de criação de conteúdo desenvolvida para equipes de redes sociais e marcas. Oferece um editor rápido e leve e aplicativos móveis para criar conteúdo de vídeo e imagem otimizado para feeds sociais, juntamente com um Hub de Marcas para gerenciar ativos, modelos, equipes, campanhas e controles de marca corporativos. A Slate foi projetada para ajudar equipes de marketing e redes sociais a produzir conteúdo alinhado à marca, amigável aos algoritmos, rapidamente e em escala.

Descrição

• Define Slate's cybersecurity strategy, multi-year roadmap, risk-based priorities, security policy framework, risk register, and governance model • Report security posture and risk to the CTO, executive team, and board • Own the security budget • Lead compliance and regulatory readiness across SOX IT general controls, NIST CSF 2.0, ISO 27001, PCI-DSS, CCPA and state privacy laws, NIST 800-171, CMMC, and export control obligations • Own audit readiness, evidence collection, and remediation tracking • Recruit, lead, and develop the security team • Run security awareness and training programs • Establish vehicle and product cybersecurity capabilities, including TARA, secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements • Establish product security incident response and coordinated vulnerability disclosure programs • Embed security into the SDLC across consumer web, ecommerce, mobile, B2B integrations, and internal applications • Set standards for threat modeling, secure code review, SAST/DAST, dependency and secrets management, and cloud security posture across AWS, Azure, and edge platforms • Drive penetration testing and remediation prioritization • Secure ERP, WMS, procurement, warranty, and other enterprise platforms • Own role design, segregation of duties, privileged access, and access reviews • Establish an OT security program for the Warsaw plant and future sites aligned to IEC 62443 • Own identity and access management, endpoint and email security, vulnerability management, and corporate security architecture • Define data classification, retention, protection standards, privacy-by-design controls, and safe-use controls for AI and LLM tools • Own detection, response, threat intelligence, incident response planning, crisis communications, legal coordination, and regulatory notification • Establish a third-party and supply-chain security risk program • Partner across Technology, vehicle engineering, manufacturing, legal, compliance, finance, internal audit, supply chain, and customer care

🎯 Requisitos

• 10 or more years in information security or cybersecurity • At least 5 years leading security teams or programs • Experience building or substantially maturing a security program across multiple domains • Hands-on leadership of compliance efforts against SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171 • Experience with real audits and certifications • Direct experience securing manufacturing, industrial, or OT environments, or strong working knowledge of IEC 62443, OT network segmentation, and production-floor realities • Solid technical grounding in cloud security, identity and access management, application security, and security operations • Ability to evaluate architecture and challenge vendors • Track record of translating risk into business terms and making pragmatic, prioritized tradeoffs • Strong written and verbal communication, including presenting to executives and boards • Low-ego, collaborative approach to working across departments • Applicants must be authorized to work in the United States on a permanent basis • Automotive, EV, or connected product security experience, including ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System (preferred) • Experience standing up security for a greenfield plant, a new company, or a rapidly scaling business (preferred) • Consumer ecommerce and payments security, including PCI-DSS scoping and consumer privacy regulations (preferred) • Experience with CMMC, ITAR/EAR, or government and defense contracting requirements (preferred) • Familiarity with securing data platforms and AI/ML or LLM-based applications (preferred) • Industry certifications such as CISSP, CISM, GICSP, or CCSP (preferred) • Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience (preferred)

🏖️ Benefícios

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • Vacation • 401k • Equity program eligibility • Discretionary annual incentive program eligibility • Reasonable accommodation for qualified individuals with disabilities

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo