Search Remote Jobs

Founding Information Security Lead

Job not on LinkedIn

🔥 6 minutes ago

🌐 United States, Vietnam – Remote

infoinfo

🏄 California, Washington – Remote

infoinfo

💵 $120k - $220k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

infoinfo
Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Flodesk

Flodesk

11 - 50 employees

Founded 2017

☁️ SaaS

🛍️ eCommerce

📣 Marketing

SaaS • eCommerce • Marketing

Flodesk is a company that provides simple and intuitive software tools for email marketing, allowing entrepreneurs and small businesses to grow their business. The platform enables users to design and send on-brand marketing emails, create sales pages, accept online payments, and utilize opt-in forms to grow their lists. Featuring beautiful, customizable templates and advanced automation capabilities, Flodesk aims to simplify the marketing process. It also offers robust analytics to understand the performance of campaigns and connections to various third-party tools via API. Flodesk caters to businesses of all sizes with options for custom plans and provides resources through Flodesk University for training on the platform.

📋 Description

• Own Flodesk's security program, including policies, controls, governance, and long-term maturity planning • Collaborate cross-functionally to embed security into product, operational, and technology decisions • Maintain privacy-related security practices for data handling, retention, and customer commitments • Lead SOC 2, ISO 27001, and CCPA readiness, audits, evidence collection, and continuous compliance • Partner with engineering on security architecture, development workflows, release processes, and security foundations across cloud infrastructure, applications, data, and internal systems • Evaluate, implement, and maintain security tooling and automation • Own security incident management end to end • Design, implement, and continuously improve controls • Track and report security posture, program maturity, and compliance status • Defend Flodesk's SaaS platform and customers with protective mechanisms and security capabilities • Manage company hardware lifecycle from procurement to retirement • Provide first-line IT support for hardware, software, and network connectivity • Run new-hire account setup, device provisioning, and secure access revocation for leavers • Manage domain registrations, DNS, and general IT housekeeping • Vet new tools for SSO, 2FA, and integration capabilities • Maintain a registry of approved software

🎯 Requirements

• 10+ years in information security, with a track record of building or maturing security programs • 3+ years in an information security leadership role • Strong foundation in cloud security, identity governance, vulnerability management, and incident response • Proven experience aligning security and privacy practices with GDPR • Comfortable partnering directly with engineering on product security and secure development practices • Clear, confident communication with technical and non-technical stakeholders • Can-do attitude, flexibility, and willingness to occasionally handle basic tasks • Willingness to travel on a semiannual basis • Experience securing SaaS products is an advantage • Experience implementing SOC 2, ISO 27001/2, or similar frameworks is an advantage • Background in reliability, DevOps, or application architecture is an advantage • Conversational or better Vietnamese is an advantage

🏖️ Benefits

• Fully paid health insurance for individual coverage • 16 weeks paid parental leave for non-birthing parents • 22 weeks paid maternity leave for birthing parents • Unlimited flexible time off • 401k match (US employees only) • $1,000 annual stipend for learning and development

Apply Now

Similar Jobs

🔥 23 hours ago

General Dynamics Information Technology

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Cybersecurity Architect leading RMF, risk mitigation, and ATO efforts for DoD Zero Trust systems. GDIT delivers technology and mission services to U.S. government, defense, and intelligence agencies.

🕒 Yesterday

PGTEK

51 - 200

💼 Consulting

🎖️ Defense

📦 Logistics

AI red-team engineer attacking PGTEK agents and converting findings into durable controls. Supporting secure Federal and DoD systems through threat modeling, remediation, and authorization activities.

🕒 Yesterday

Cisco

10,000+ employees

🔧 Hardware

🔐 Security

🏢 Enterprise

Cisco software security lead securing AI-enabled enterprise platforms and applications. Leading threat modeling, architecture reviews, risk remediation, and portfolio security metrics.

🕒 Yesterday

Cisco

10,000+ employees

🔧 Hardware

🔐 Security

🏢 Enterprise

Software Security Lead securing Cisco’s enterprise IT and Operations platforms across applications, cloud, identity, data, and AI. Leading threat modeling, architecture reviews, risk remediation, and security metrics.

🕒 Yesterday

Lovesac

501 - 1000

🏭 Manufacturing

💼 Consulting

🛒 Retail

Information Security Architect engineering secure platforms and enterprise designs for Lovesac, a fast-growing adaptable furniture company. Leading Zero Trust architecture, security tooling, integrations, and governance.