Head of Security and Compliance

Job not on LinkedIn

🔥 1 hour ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Korbyt

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1990

☁️ SaaS

🏢 Enterprise

💰 Private equity on 2023-08

SaaS • Enterprise

Korbyt is an AI-powered enterprise SaaS platform that delivers digital signage and workplace experience solutions. Korbyt’s products include an enterprise-grade CMS for digital signage, interactive displays, meeting room and desk booking, visitor management, employee communications (employee app, intranet, email), and related hardware (media players) and analytics. The platform integrates with many enterprise applications and supports cloud, on-premises, and hybrid environments; it applies AI and machine learning for content recommendations, space optimization, and real-time analytics. Korbyt targets large organizations across industries such as banking/finance, higher education, manufacturing, retail and other enterprise customers.

📋 Description

• Own the SOC 2 Type II audit cycle end to end, including control design and operation, evidence collection, auditor relationship, remediation, and annual renewal • Run the GRC platform as the system of record for controls, policies, and evidence, keeping it audit-ready year-round • Maintain and advance compliance posture against customer-relevant frameworks, including readiness toward additional certifications such as ISO 27001 • Track GDPR and CCPA requirements and align policies and practices • Own customer security questionnaires, RFI/RFP security sections, audits, and due diligence requests with Sales and Sales Engineering • Build and maintain a reusable library of approved security responses, documentation, and artifacts • Represent Korbyt on customer and prospect security review calls • Identify security gaps blocking enterprise deals and drive resolution with Engineering and IT • Write, maintain, and improve information security policies, standards, and procedures • Design and operate controls across access management, change management, vendor management, data handling, and employee lifecycle • Run access reviews, risk assessments, and internal audits; maintain the risk register and remediation plans • Report security and compliance posture to executive leadership using practical metrics • Run vulnerability management and drive remediation with Engineering and IT • Coordinate incident response, lead investigations, conduct post-incident reviews, and manage customer communications as needed • Partner with Engineering to embed security requirements into the development lifecycle and review security implications of products, technologies, and integrations • Maintain business continuity and disaster recovery documentation and testing from a security perspective • Select and manage external security partners, including penetration testing firms, auditors, and managed security or monitoring services • Run the third-party vendor risk program, including new-vendor security reviews and periodic reassessments • Run the security awareness program, including onboarding training, annual refreshers, and phishing simulations • Promote practical security accountability across business functions

🎯 Requirements

• 6–10 years of hands-on security and compliance experience at a SaaS or technology company • Direct, personal experience running a SOC 2 Type II audit cycle, including evidence collection and auditor management • Experience owning customer security questionnaires, RFI/RFP security responses, and customer security reviews for enterprise buyers • Working proficiency with a GRC platform such as Vanta, Drata, or Secureframe • Strong working knowledge of cloud security (AWS and/or Azure), identity and access management, and vulnerability management • Ability to write clear, audit-ready policies and procedures, and explain security posture credibly to customers, auditors, and executives • Experience coordinating incident response and working directly with engineering teams on remediation • Comfort operating as a one-person security function: self-directed, organized, and accountable for outcomes without a team • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience • Industry certifications such as CISSP, CISM, CCSP, CISA, or ISO 27001 Lead Implementer/Auditor (preferred) • Experience taking a company through ISO 27001 readiness or certification (preferred) • Experience at a PE-backed or high-growth SaaS company where security supported the sales process (preferred) • Familiarity with application security practices and secure SDLC (preferred)

🏖️ Benefits

• Fully remote work arrangement

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume