Head of IT & Security leading compliance, risk, and IT functions at Fable Security. Driving security initiatives and representing the company within the security community.
Responsibilities
Own our compliance program, including SOC 2 and ISO 27001, and the ISMS that supports them
Assist with operational privacy processes in support of GDPR and adherence to privacy laws across all US states and international requirements
Assist the CISO with privacy program implementation
Lead the third-party risk management program
Lead AI risk management and governance
Drive our top focus areas: identity and access management, product security, and internal IT operations
Contribute to security research and thought leadership
Drive and attend industry events in partnership with the go-to-market team, representing Fable Security's leadership
Submit to and speak at conferences, building the company's presence in the security community
Requirements
7+ years across security, compliance, and IT, including direct experience leading ISO 27001 and SOC 2 programs
Working knowledge of GDPR and US state and international privacy requirements
Experienced across identity, product security, risk management, and IT operations
Comfortable representing the company externally — at events, in research, and on stage
Clear communicator who can translate technical and regulatory requirements for any audience
Nice to Have: CISSP, CISM, CIPP/E, ISO 27001 Lead Implementer/Auditor, or equivalent certifications
Established presence in the security community: publications, talks, or research contributions
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.