Director of Security

Stelle nicht auf LinkedIn

🕒 vor 4 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Togal.AI

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

Gegründet 2019

🏗️ Bauwesen

💼 Beratung

🤖 Künstliche Intelligenz

💰 €7.000.000 Seed Round - Togal.AI im 2023-03

Construction • Consulting • Artificial Intelligence

Togal. AI ist eine cloudbasierte, KI-gesteuerte Softwareplattform für den Baugewerbe, die automatisch Räume und Merkmale auf Architekturplänen und Zeichnungen erkennt, misst, vergleicht und kennzeichnet. Entwickelt von und für Kalkulatoren, beschleunigt sie die Mengenberechnungen vor der Bauphase, erhöht die Genauigkeit, ermöglicht die Zusammenarbeit in Echtzeit und automatisiert manuelle Aufgaben (einschließlich der natürlichen Sprachsteuerung über Togal. CHAT), um Bauunternehmern und Subunternehmern dabei zu helfen, schnellere und genauere Angebote zu erstellen.

Beschreibung

• Own Togal's SOC 2 Type II program end-to-end — evidence collection, audit management, and control ownership in Vanta — so it's audit-ready year-round, not just before an audit. • Turn around customer security questionnaires and vendor security reviews quickly and accurately. • Be Togal's front-line security contact for customers and prospects, including calls with customer-side CISOs and security teams during deal cycles and MSA negotiations. • Design a written incident-response and notification policy — clear triggers, timelines, escalation paths, and roles — that's actually followed, replacing today's ad hoc handling by the CTO and CEO. • Lead incident response when something does happen: containment, investigation, and coordinating any outside help needed (e.g., an MDR/IR retainer for surge capacity) — this is "own it when it happens," not the day-to-day center of the role. • Evaluate whether to buy, outsource, or build additional security monitoring — assess managed detection/SIEM options against what we actually need before committing engineering time to standing anything up ourselves. • Assess and tighten cloud security posture (IAM, configuration, logging) alongside the CTO and engineering team. • Partner with Legal and the CEO on breach determination and external communication, as a defined process rather than a one-off scramble.

🎯 Anforderungen

• Experience running a SOC 2 or similar compliance program end-to-end, including audit management and tooling (Vanta or equivalent). • Comfortable being the primary voice in customer-facing security conversations — you can sit across from a customer's CISO and hold your own. • Solid grounding in cloud security fundamentals (IAM, configuration management, logging) rather than just general cloud familiarity. • Enough hands-on technical depth to lead an incident when one occurs — you don't need to be a forensics specialist, but you should be credible investigating and coordinating a response. • Comfortable operating independently at an early-stage company, building the function as you go rather than stepping into an existing team or playbook. • Experience standing up a security/trust function from scratch at a startup or scale-up. • Background in construction tech or B2B SaaS. • Familiarity with email authentication and phishing/account-compromise forensics (DKIM/SPF/DMARC). • Experience evaluating or managing an MDR/IR retainer relationship.

🏖️ Vorteile

• We are an equal opportunity employer committed to building a diverse team. • We welcome applications from candidates of all backgrounds who are passionate about using technology to transform the construction industry.