Director of Security

Job not on LinkedIn

🕒 July 27

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 13%

infoinfo
Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Togal.AI

Togal.AI

11 - 50 employees

Founded 2019

🏗️ Construction

💼 Consulting

🤖 Artificial Intelligence

💰 $7M Seed Round - Togal.AI on 2023-03

Construction • Consulting • Artificial Intelligence

Togal. AI is a cloud-based, AI-powered takeoff platform for the construction industry that automatically detects, measures, compares and labels spaces and features on architectural plans and drawings. Built by estimators for estimators, it speeds pre-construction takeoffs, increases accuracy, enables real-time team collaboration, and automates manual tasks (including natural-language interaction via Togal. CHAT) to help contractors and subcontractors produce faster, more accurate bids.

📋 Description

• Own Togal's SOC 2 Type II program end-to-end — evidence collection, audit management, and control ownership in Vanta — so it's audit-ready year-round, not just before an audit. • Turn around customer security questionnaires and vendor security reviews quickly and accurately. • Be Togal's front-line security contact for customers and prospects, including calls with customer-side CISOs and security teams during deal cycles and MSA negotiations. • Design a written incident-response and notification policy — clear triggers, timelines, escalation paths, and roles — that's actually followed, replacing today's ad hoc handling by the CTO and CEO. • Lead incident response when something does happen: containment, investigation, and coordinating any outside help needed (e.g., an MDR/IR retainer for surge capacity) — this is "own it when it happens," not the day-to-day center of the role. • Evaluate whether to buy, outsource, or build additional security monitoring — assess managed detection/SIEM options against what we actually need before committing engineering time to standing anything up ourselves. • Assess and tighten cloud security posture (IAM, configuration, logging) alongside the CTO and engineering team. • Partner with Legal and the CEO on breach determination and external communication, as a defined process rather than a one-off scramble.

🎯 Requirements

• Experience running a SOC 2 or similar compliance program end-to-end, including audit management and tooling (Vanta or equivalent). • Comfortable being the primary voice in customer-facing security conversations — you can sit across from a customer's CISO and hold your own. • Solid grounding in cloud security fundamentals (IAM, configuration management, logging) rather than just general cloud familiarity. • Enough hands-on technical depth to lead an incident when one occurs — you don't need to be a forensics specialist, but you should be credible investigating and coordinating a response. • Comfortable operating independently at an early-stage company, building the function as you go rather than stepping into an existing team or playbook. • Experience standing up a security/trust function from scratch at a startup or scale-up. • Background in construction tech or B2B SaaS. • Familiarity with email authentication and phishing/account-compromise forensics (DKIM/SPF/DMARC). • Experience evaluating or managing an MDR/IR retainer relationship.

🏖️ Benefits

• We are an equal opportunity employer committed to building a diverse team. • We welcome applications from candidates of all backgrounds who are passionate about using technology to transform the construction industry.

Apply Now

Similar Jobs

🕒 July 27

Edged

51 - 200

🤝 B2B

⚡ Energy

Director of Security, Risk & Compliance Operations at Edged managing security programs in North America. Overseeing physical security, compliance, and business continuity across data centers.

🕒 July 27

Group-IB

501 - 1000

🔒 Cybersecurity

💼 Consulting

☁️ SaaS

Business Development Director at Group-IB focusing on financial services sector in USA. Driving revenue growth and expanding strategic customer relationships in cyber enabled fraud prevention solutions.

🕒 July 27

jrni

51 - 200

☁️ SaaS

🤝 B2B

🏢 Enterprise

Director of Information Security and Operations at jrni, a customer engagement solutions provider. Leading InfoSec and TechOps teams while ensuring operational excellence and security compliance.

🕒 July 27

Curative

501 - 1000

🏥 Healthcare

🛡️ Insurance

Principal Security Engineer leading security engineering function for Curative's infrastructure, applications, and AI systems with a strong emphasis on building secure designs.

🕒 July 25

Gainwell Technologies

10,000+ employees

💼 Consulting

📦 Logistics

⚕️ Healthcare Insurance

Information Security Officer responsible for security compliance and client delivery in healthcare. Collaborating with leadership to identify security issues and manage risks.