Director of Cybersecurity

🕒 6 days ago

☕ Washington – Remote

☕ Washington – Remote

💵 $171.2k - $285.3k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Slate Auto

WebsiteLinkedInAll Job Openings

201 - 500 employees

🚘 Automotive

🏭 Manufacturing

🚗 Transport

Automotive • Manufacturing • Transport

Slate Auto is a manufacturer of a radically simple, highly customizable electric pickup that can be configured as a pickup or fastback SUV. The company sells directly to consumers with an online configurator called the Slate Maker, a reservation model, and an accessories marketplace for swaps and upgrades. Slate Auto emphasizes affordability, practical design, and easy ownership with integrated charging options and third‑party service and charging network partnerships.

📋 Description

• Define Slate's cybersecurity strategy, multi-year roadmap, and risk-based priorities • Own the security policy framework, risk register, governance model, and security budget • Report security posture and risk to the CTO, executive team, and board • Lead compliance and regulatory readiness across SOX IT general controls, NIST CSF 2.0, ISO 27001, PCI-DSS, CCPA and state privacy laws, NIST 800-171, CMMC, and export control obligations • Own audit readiness, evidence collection, and remediation tracking • Recruit, lead, and develop the security team • Run security awareness and training programs • Establish vehicle cybersecurity management aligned to ISO/SAE 21434 and UN R155/R156 • Lead threat analysis and risk assessment, secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements • Establish product security incident response and coordinated vulnerability disclosure programs • Embed security into the SDLC across websites, ecommerce, mobile apps, B2B integrations, and internal applications • Set standards for threat modeling, secure code review, SAST/DAST, dependency and secrets management, and cloud security across AWS, Azure, and edge platforms • Drive penetration testing and remediation prioritization • Secure ERP, WMS, procurement, warranty, and other enterprise platforms • Own role design standards, segregation of duties, privileged access, and access reviews • Establish an OT security program for the Warsaw plant and future sites, including network segmentation, asset inventory, secure remote/vendor access, OT monitoring, and incident response • Own identity and access management, endpoint and email security, vulnerability management, and corporate security architecture • Define data classification, retention, protection, privacy-by-design, and AI/LLM security controls • Own detection, response, and threat intelligence across IT, cloud, OT, and vehicle environments • Build and exercise incident response plans, including crisis communications, legal coordination, and regulatory notification • Establish a vendor security risk program for SaaS providers, MSPs, integration partners, component suppliers, and contract manufacturers • Partner with leaders across Technology, vehicle engineering, manufacturing, legal, compliance, finance, internal audit, supply chain, and customer care

🎯 Requirements

• 10 or more years in information security or cybersecurity • At least 5 years leading security teams or programs • Experience building or substantially maturing a security program across multiple domains • Hands-on leadership of compliance efforts against recognized frameworks, including SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171 • Experience with real audits and certifications • Direct experience securing manufacturing, industrial, or OT environments, or strong working knowledge of IEC 62443, OT network segmentation, and production-floor realities • Solid technical grounding in cloud security, AWS preferred, identity and access management, application security, and security operations • Track record of translating risk into business terms and making pragmatic, prioritized tradeoffs • Strong written and verbal communication, including presenting to executives and boards • Low-ego, collaborative approach to working across departments • Automotive, EV, or connected product security experience preferred • Experience with ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System preferred • Experience standing up security for a greenfield plant, a new company, or a rapidly scaling business preferred • Consumer ecommerce and payments security, including PCI-DSS scoping and consumer privacy regulations, preferred • Experience with CMMC, ITAR/EAR, or government and defense contracting requirements preferred • Familiarity with securing data platforms and AI/ML or LLM-based applications preferred • Industry certifications such as CISSP, CISM, GICSP, or CCSP preferred • Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience preferred • Must be authorized to work in the United States on a permanent basis • Visa sponsorship is unavailable

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • Vacation • 401k • Potential eligibility for equity program • Potential eligibility for discretionary annual incentive program • Reasonable accommodation for qualified individuals with disabilities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume