Head of Security

About This Role

This strategic and technical role leads the security function, reporting to the Senior Director of Infrastructure Engineering. The Head of Security owns the security roadmap, team, risk management, and regulatory compliance, working with leaders across various departments and having access to the executive team and board. The role is open to candidates in Canada and the United States.

Responsibilities

• Build the security organization by hiring engineers, GRC staff, and security operations partners
• Manage and mentor reports from junior individual contributors to Staff and Director level
• Set security objectives and strategy across security domains
• Mature GRC processes, including control frameworks, automated evidence, policy lifecycle, risk management, and privacy obligations in partnership with Legal
• Develop an AI-first security program, including AI-native vulnerability management and detection tooling, and support safe adoption of AI
• Build security culture through training, secure-by-default patterns, developer enablement, and clear security expectations
• Guide security tooling, organizational structure, and team priorities to protect customers and products
• Set technical direction and make final decisions on security architecture across Engineering
• Be accountable to the board for security posture and risk acceptance

Requirements

• 10+ years of security experience, including 4+ years leading a security function or major pillar
• Experience managing managers, directors, and senior technical leaders
• Experience owning company-level security strategy, budget, and outcomes at a fast-paced technology company
• Hands-on experience in at least two of application or product security, infrastructure security, detection and incident response, enterprise IT and identity, or GRC
• Experience scaling GRC programs, including control frameworks, evidence automation, policy, and privacy program management
• Familiarity with SOX, GDPR, PCI, SOC 2, or ISO 27001
• Experience presenting to and working with a board or audit committee, and with external auditors, regulators, or QSAs
• Experience quantifying and accepting security risks and communicating technical risk in business terms
• Track record of hiring security professionals and developing technical and people leaders
• Professional experience driving AI transformation in security, engineering, or IT organizations

Benefits

• Equity and bonus
• Remote-first flexibility
• Unlimited PTO
• Recharge days
• Parental leave
• Wellness budget
• Development budget