Lead, System Security

Emploi pas sur LinkedIn

🕒 il y a 8 jours

🇺🇸 États-Unis – Télétravail

💵 $144 122 - $240 204 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Slate Auto

Site WebLinkedInTous les Emplois

201 - 500 employés

🚘 Automobile

🏭 Fabrication

🚗 Transport

Automotive • Manufacturing • Transport

Slate est une plateforme de création de contenu SaaS conçue pour les équipes de réseaux sociaux et les marques. Elle propose un éditeur rapide et léger ainsi que des applications mobiles pour créer des contenus vidéo et image optimisés pour les flux sociaux, en plus d'un Brand Hub pour gérer les ressources, les modèles, les équipes, les campagnes et les contrôles de marque d'entreprise. Slate est conçu pour aider les équipes marketing et réseaux sociaux à produire rapidement et à grande échelle des contenus respectant la marque et adaptés aux algorithmes.

Description

• Define Slate's cybersecurity strategy, multi-year roadmap, risk-based priorities, security policy framework, risk register, and governance model • Report security posture and risk to the CTO, executive team, and board • Own the security budget • Lead compliance and regulatory readiness across SOX IT general controls, NIST CSF 2.0, ISO 27001, PCI-DSS, CCPA and state privacy laws, NIST 800-171, CMMC, and export control obligations • Own audit readiness, evidence collection, and remediation tracking • Recruit, lead, and develop the security team • Run security awareness and training programs • Establish vehicle and product cybersecurity capabilities, including TARA, secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements • Establish product security incident response and coordinated vulnerability disclosure programs • Embed security into the SDLC across consumer web, ecommerce, mobile, B2B integrations, and internal applications • Set standards for threat modeling, secure code review, SAST/DAST, dependency and secrets management, and cloud security posture across AWS, Azure, and edge platforms • Drive penetration testing and remediation prioritization • Secure ERP, WMS, procurement, warranty, and other enterprise platforms • Own role design, segregation of duties, privileged access, and access reviews • Establish an OT security program for the Warsaw plant and future sites aligned to IEC 62443 • Own identity and access management, endpoint and email security, vulnerability management, and corporate security architecture • Define data classification, retention, protection standards, privacy-by-design controls, and safe-use controls for AI and LLM tools • Own detection, response, threat intelligence, incident response planning, crisis communications, legal coordination, and regulatory notification • Establish a third-party and supply-chain security risk program • Partner across Technology, vehicle engineering, manufacturing, legal, compliance, finance, internal audit, supply chain, and customer care

🎯 Exigences

• 10 or more years in information security or cybersecurity • At least 5 years leading security teams or programs • Experience building or substantially maturing a security program across multiple domains • Hands-on leadership of compliance efforts against SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171 • Experience with real audits and certifications • Direct experience securing manufacturing, industrial, or OT environments, or strong working knowledge of IEC 62443, OT network segmentation, and production-floor realities • Solid technical grounding in cloud security, identity and access management, application security, and security operations • Ability to evaluate architecture and challenge vendors • Track record of translating risk into business terms and making pragmatic, prioritized tradeoffs • Strong written and verbal communication, including presenting to executives and boards • Low-ego, collaborative approach to working across departments • Applicants must be authorized to work in the United States on a permanent basis • Automotive, EV, or connected product security experience, including ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System (preferred) • Experience standing up security for a greenfield plant, a new company, or a rapidly scaling business (preferred) • Consumer ecommerce and payments security, including PCI-DSS scoping and consumer privacy regulations (preferred) • Experience with CMMC, ITAR/EAR, or government and defense contracting requirements (preferred) • Familiarity with securing data platforms and AI/ML or LLM-based applications (preferred) • Industry certifications such as CISSP, CISM, GICSP, or CCSP (preferred) • Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience (preferred)

🏖️ Avantages

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • Vacation • 401k • Equity program eligibility • Discretionary annual incentive program eligibility • Reasonable accommodation for qualified individuals with disabilities