Director of Information Security

🕒 July 30

🇭🇷 Croatia – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 26%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Constructor

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2015

☁️ SaaS

🤖 Artificial Intelligence

🛍️ eCommerce

💰 $25M Series B - Constructor on 2024-06

SaaS • Artificial Intelligence • eCommerce

Constructor is an AI-native, API-first platform that provides product search and discovery solutions optimized for e-commerce. The company offers a commerce reasoning engine and a suite of features — search, autosuggest, personalized recommendations, AI shopping agents, attribute enrichment, retail media, and cross-channel discovery — to help retailers and enterprises deliver personalized discovery experiences across onsite and offsite touchpoints. Constructor positions itself as a specialist in product discovery for both B2C and B2B retail, integrating with existing tech stacks and emphasizing transparent, explainable AI for merchandising and conversion optimization.

📋 Description

• Own Constructor's security program end-to-end, protecting its platform, customer data, and team • Report to the CIO and serve as the company's senior security leader • Answer prospect security questions and review and finalize security questionnaires • Meet directly with prospects and customers to represent Constructor's security posture • Own SOC 2 Type II and ISO 27001 certification programs • Manage external auditors, maintain controls, and ensure continuous compliance • Own security incidents from detection through resolution and post-mortem • Maintain and improve the incident response plan • Conduct ongoing risk assessments, maintain the risk register, and present risk posture to leadership and the board • Run quarterly access reviews across all systems and enforce least-privilege principles • Advise employees on new tools, vendors, and workflows • Define and maintain guardrails for internal AI use • Plan and execute tabletop exercises, simulated incidents, and red/purple team engagements • Oversee data loss prevention, triage alerts, and refine policies • Review third-party vendor security posture and manage vendor risk assessments • Maintain the employee security training program and foster a security-conscious culture • Collaborate with Platform Engineering on AWS cloud security posture, container security, and vulnerability management

🎯 Requirements

• 5+ years of experience in information security, including at least 2 years in a senior or leadership role • 2+ years of hands-on experience in a DevOps or Platform Engineering role • Proficiency with AI tools like Claude Code • Deep familiarity with SOC 2, ISO 27001, GDPR, and CCPA compliance frameworks • Experience owning incident response end-to-end in a SaaS or cloud-native environment • Comfortable representing security posture in customer-facing settings with enterprise prospects • Hands-on experience with identity management (Okta or similar), MDM, DLP, and cloud security tooling • Strong understanding of application security in a modern stack • Excellent English written communication • Ability to operate independently with minimal oversight in a fully remote culture

🏖️ Benefits

• Unlimited vacation time; employees are strongly encouraged to take at least 3 weeks per year • Competitive compensation package including stock options • Fully remote team; choose where you live • Work from home stipend • Apple laptops provided for new employees • Training and development budget for every employee, refreshed each year • Parental leave for qualified employees