Director, Security and Compliance

🕒 il y a 10 jours

🌐 États-Unis, Canada – Distant

🇺🇸 États-Unis – Télétravail 🇨🇦 Canada – Télétravail

💵 $175 000 - $200 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Rebuy Engine

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2017

🛍️ eCommerce

🤖 Intelligence artificielle

☁️ SaaS

💰 €17 000 000 Series A en 2023-02

eCommerce • Artificial Intelligence • SaaS

Rebuy Engine est une plateforme de personnalisation complète de bout en bout, propulsée par l'IA, conçue pour améliorer les expériences de commerce électronique. La plateforme aide les entreprises à créer des expériences d'achat intelligentes grâce à des analyses basées sur les données, des recommandations de produits personnalisées, et des intégrations fluides avec les principales plateformes de commerce électronique comme Shopify Plus. En se concentrant sur l'augmentation des taux de conversion et la valeur moyenne des commandes (AOV), Rebuy Engine permet aux commerçants de simplifier leurs processus de vente, d'optimiser leurs stratégies de merchandising et, en fin de compte, de générer plus de revenus tout au long du parcours client.

Description

• Own security, compliance, privacy, and IT across the company • Lead SOC 2 Type 2, GDPR, CCPA/CPRA, and Shopify partner security compliance programs through audits and third-party assessments • Own security policies, risk management, and vendor risk management • Run periodic access reviews across company systems • Maintain the Trust Center and support Sales with customer security reviews and questionnaires • Lead security awareness training and security-related personnel lifecycle processes • Support cyber insurance applications and renewals • Own business continuity and disaster recovery planning, including regular testing and validation • Facilitate incident response tabletop exercises • Own data governance and privacy documentation, including the privacy policy, DPA, subprocessor list, and vulnerability disclosure policy • Manage data subject requests and supporting automated processes • Review products, partnerships, data-sharing arrangements, and agreements for privacy and security impact • Help shape AI governance • Own the incident response program and coordinate customer and regulatory notifications with Legal • Run vulnerability management across cloud, code, and endpoints • Manage annual penetration testing from scoping through remediation • Partner with DevOps on CI/CD, deployments, and infrastructure security • Set application security standards and drive adoption across Engineering • Lead authentication, logging, monitoring, secrets management, cloud security, identity and access, network controls, and sensitive-data monitoring initiatives • Own email, domain, and DNS security • Manage the endpoint fleet, including device management, configuration baselines, patching, and hardware procurement and fulfillment • Administer and secure company SaaS platforms • Provide IT support to employees • Report quarterly to executive leadership on security, risk, and compliance • Own tooling and budget decisions for a significant portion of the technology stack, including cloud-spend monitoring • Advise the company on security and compliance

🎯 Exigences

• 8+ years in security and GRC • End-to-end ownership of a SOC 2 Type 2 program • Hands-on experience securing a major cloud environment; GCP preferred • Working knowledge of GDPR, CCPA/CPRA, and data governance practices • Experience with compliance automation, cloud security, and macOS device management tools such as Vanta, Orca, Iru, or equivalents • Experience administering and securing a broad SaaS environment, including identity and access management • Experience building and testing BCP/DR plans and running incident response exercises • Application security fluency, including OWASP Top 10, SAST, CI/CD, and secrets management • Ability to influence without authority and communicate risk to executives in business terms • Self-direction in a fast-moving, fully remote environment • Experience in the Shopify ecosystem • Workflow automation or scripting experience • Certifications such as CISSP, CISM, CCSP, or CIPP

🏖️ Avantages

• Fully remote work within the U.S. and Canada • Flexible vacation policy • Generous holiday schedule • Parental leave • Sick policy • Birthday holiday • 100% free health, dental, and insurance coverage for employees and their families • 401(k) retirement plans for U.S. employees • TFSA and RRSP retirement plans for Canadian employees • 3% contribution of gross salary regardless of location