Director of Security

Job not on LinkedIn

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Togal.AI

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2019

🏗️ Construction

💼 Consulting

🤖 Artificial Intelligence

💰 $7M Seed Round - Togal.AI on 2023-03

Construction • Consulting • Artificial Intelligence

Togal. AI is a cloud-based, AI-powered takeoff platform for the construction industry that automatically detects, measures, compares and labels spaces and features on architectural plans and drawings. Built by estimators for estimators, it speeds pre-construction takeoffs, increases accuracy, enables real-time team collaboration, and automates manual tasks (including natural-language interaction via Togal. CHAT) to help contractors and subcontractors produce faster, more accurate bids.

📋 Description

• Own Togal's SOC 2 Type II program end-to-end — evidence collection, audit management, and control ownership in Vanta — so it's audit-ready year-round, not just before an audit. • Turn around customer security questionnaires and vendor security reviews quickly and accurately. • Be Togal's front-line security contact for customers and prospects, including calls with customer-side CISOs and security teams during deal cycles and MSA negotiations. • Design a written incident-response and notification policy — clear triggers, timelines, escalation paths, and roles — that's actually followed, replacing today's ad hoc handling by the CTO and CEO. • Lead incident response when something does happen: containment, investigation, and coordinating any outside help needed (e.g., an MDR/IR retainer for surge capacity) — this is "own it when it happens," not the day-to-day center of the role. • Evaluate whether to buy, outsource, or build additional security monitoring — assess managed detection/SIEM options against what we actually need before committing engineering time to standing anything up ourselves. • Assess and tighten cloud security posture (IAM, configuration, logging) alongside the CTO and engineering team. • Partner with Legal and the CEO on breach determination and external communication, as a defined process rather than a one-off scramble.

🎯 Requirements

• Experience running a SOC 2 or similar compliance program end-to-end, including audit management and tooling (Vanta or equivalent). • Comfortable being the primary voice in customer-facing security conversations — you can sit across from a customer's CISO and hold your own. • Solid grounding in cloud security fundamentals (IAM, configuration management, logging) rather than just general cloud familiarity. • Enough hands-on technical depth to lead an incident when one occurs — you don't need to be a forensics specialist, but you should be credible investigating and coordinating a response. • Comfortable operating independently at an early-stage company, building the function as you go rather than stepping into an existing team or playbook. • Experience standing up a security/trust function from scratch at a startup or scale-up. • Background in construction tech or B2B SaaS. • Familiarity with email authentication and phishing/account-compromise forensics (DKIM/SPF/DMARC). • Experience evaluating or managing an MDR/IR retainer relationship.

🏖️ Benefits

• We are an equal opportunity employer committed to building a diverse team. • We welcome applications from candidates of all backgrounds who are passionate about using technology to transform the construction industry.