Director of Information Security

🔥 52 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Fetch

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2013

👥 B2C

📣 Marketing

🔥 Funding within the last year

💰 Later Stage VC on 2026-05

B2C • Marketing

Fetch is a consumer mobile rewards app that lets users scan receipts to earn points that can be redeemed for gift cards and other rewards. The app awards points for everyday purchases (groceries, fuel, meals, games, etc. ), offers in-app games and promotions, and provides a business-facing offering (Fetch for Business) and browser extension. Fetch reports millions of monthly earners, millions of app reviews, and over $1B in rewards redeemed. The service emphasizes easy receipt scanning, point accumulation, and low-effort rewards for shoppers.

📋 Description

• Own Fetch's security function end to end, including vulnerability management, AppSec, incident response and forensics, security architecture, GRC/compliance, third-party risk, and security awareness • Own day-to-day execution of the security function and reduce high-blast-radius security risk • Build a mature, auditable, and scalable security program with policies, controls, evidence, and reporting • Lead and grow the Security team • Serve as primary technical authority and incident commander for security events • Represent Information Security to executives, auditors, customers, and partners • Own the AppSec and vulnerability management program, including Snyk, CI/CD security gating, and repository risk classification • Drive vulnerability remediation SLAs and proactive prevention • Coordinate incident response, containment, communication, post-incident reviews, and root-cause analysis • Own bug bounty and continuous penetration testing disclosure processes • Own security architecture reviews for new systems, platforms, and AI agent deployments • Maintain security standards for cloud infrastructure, endpoint protection, and network/edge security • Partner with IT Operations on identity-related risk and access governance • Own security policies, risk register, and control framework; lead audits and assessments • Report program maturity, open risk, and remediation progress to executive leadership • Partner with the Chief AI Officer on AI governance, acceptable-use policy enforcement, and AI tooling risk • Provide security review and risk sign-off for AI platforms, agents, and integrations • Own vendor and third-party security risk assessments • Lead company-wide security awareness, phishing simulations, and targeted training • Hire, coach, and develop the Security Engineering team; set priorities and performance management • Establish team operating rhythms including on-call/incident rotation, backlog grooming, and technical review standards • Own recurring executive security reporting and represent Information Security in cross-functional forums

🎯 Requirements

• 7+ years in information security, including meaningful experience in application security, incident response, and security architecture • Demonstrated experience running vulnerability management programs at scale, such as Snyk or comparable tooling • Direct incident command experience, including coordinating cross-functional response to significant security events • People management experience, ideally building or scaling a security engineering team • Working knowledge of cloud security, identity and access management concepts, and modern AI/agent architecture risk • Strong written and verbal communication skills, including comfort presenting to executive audiences • Preferred: experience with bug bounty/responsible disclosure program management • Preferred: experience building or maturing a GRC program, including audit and compliance framework experience (SOC 2, ISO 27001) • Preferred: familiarity with AI agent security risk, including MCP-style tool/agent architectures and identity delegation patterns • Preferred: experience partnering with AI governance or data governance functions • Preferred: relevant certifications such as CISSP or CISM • Incident command and crisis leadership • Security architecture and risk assessment • Program and process maturity building • People leadership and coaching • Executive communication • Cross-functional influence without direct authority over partner teams • Judgment under ambiguity and time pressure

🏖️ Benefits

• Equity: full-time employees receive equity in Fetch • 401(k) with dollar-for-dollar matching up to 4% of eligible pay • Comprehensive medical, dental, and vision plans, including pet coverage • $10,000 per year in education reimbursement • Employee Resource Groups and Inclusion Council participation • Flexible PTO • 9 paid holidays • Year-end week-long break • 14 weeks of fully paid parental leave • 6 additional weeks of paid childbirth recovery leave for birthing parents • Flexible return-to-work schedule • One-time $2,000 Calvin Care Cash incentive for employees welcoming new family members • Flexible work environment; fully remote from anywhere in the US for US-based roles • Hardware and software equipment provided for home working

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume