Founding Information Security Lead

🕒 4 days ago

🌐 United States, Vietnam – Remote

🇺🇸 United States – Remote 🇻🇳 Vietnam – Remote

🏄 California, Washington – Remote

🏄 California – Remote ☕ Washington – Remote

💵 $120k - $220k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Flodesk

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2017

☁️ SaaS

🛍️ eCommerce

📣 Marketing

SaaS • eCommerce • Marketing

Flodesk is a company that provides simple and intuitive software tools for email marketing, allowing entrepreneurs and small businesses to grow their business. The platform enables users to design and send on-brand marketing emails, create sales pages, accept online payments, and utilize opt-in forms to grow their lists. Featuring beautiful, customizable templates and advanced automation capabilities, Flodesk aims to simplify the marketing process. It also offers robust analytics to understand the performance of campaigns and connections to various third-party tools via API. Flodesk caters to businesses of all sizes with options for custom plans and provides resources through Flodesk University for training on the platform.

📋 Description

• Own Flodesk's security program, including policies, controls, governance, and long-term maturity planning • Collaborate cross-functionally to embed security into product, operational, and technology decisions • Maintain privacy-related security practices for data handling, retention, and customer commitments • Lead SOC 2, ISO 27001, and CCPA readiness, audits, evidence collection, and continuous compliance • Partner with engineering on security architecture, development workflows, release processes, and security foundations across cloud infrastructure, applications, data, and internal systems • Evaluate, implement, and maintain security tooling and automation • Own security incident management end to end • Design, implement, and continuously improve controls • Track and report security posture, program maturity, and compliance status • Defend Flodesk's SaaS platform and customers with protective mechanisms and security capabilities • Manage company hardware lifecycle from procurement to retirement • Provide first-line IT support for hardware, software, and network connectivity • Run new-hire account setup, device provisioning, and secure access revocation for leavers • Manage domain registrations, DNS, and general IT housekeeping • Vet new tools for SSO, 2FA, and integration capabilities • Maintain a registry of approved software

🎯 Requirements

• 10+ years in information security, with a track record of building or maturing security programs • 3+ years in an information security leadership role • Strong foundation in cloud security, identity governance, vulnerability management, and incident response • Proven experience aligning security and privacy practices with GDPR • Comfortable partnering directly with engineering on product security and secure development practices • Clear, confident communication with technical and non-technical stakeholders • Can-do attitude, flexibility, and willingness to occasionally handle basic tasks • Willingness to travel on a semiannual basis • Experience securing SaaS products is an advantage • Experience implementing SOC 2, ISO 27001/2, or similar frameworks is an advantage • Background in reliability, DevOps, or application architecture is an advantage • Conversational or better Vietnamese is an advantage

🏖️ Benefits

• Fully paid health insurance for individual coverage • 16 weeks paid parental leave for non-birthing parents • 22 weeks paid maternity leave for birthing parents • Unlimited flexible time off • 401k match (US employees only) • $1,000 annual stipend for learning and development