Head of Security leading Super.com's AI-first security program and enterprise risk strategy. Building security teams, protecting financial technology products, and partnering with executives and the board.
Responsibilities
Define and drive Super.com's security roadmap
Staff and manage the security function
Navigate security risks and ensure regulatory compliance
Deliver a safe and secure product to customers
Report to the Senior Director of Infrastructure Engineering
Collaborate with Legal, Data, Engineering, Product, Finance, and HR leaders
Maintain direct access to the executive team and board
Lead hiring for engineers, GRC staff, and SOC partners
Manage junior individual contributors through Staff and Director-level reports
Provide mentorship and direct reports toward impactful opportunities
Own OKR setting and strategic planning across security domains
Mature governance, risk, and compliance functions
Expand the control framework with automated evidence, policy lifecycle, risk management, and privacy obligations
Direct the build-out of AI-native vulnerability management and detection tooling
Provide security guidance as the company adopts AI
Use AI to scale team output
Set security culture through training, secure-by-default patterns, developer enablement, and clear expectations
Ensure customer and product security through tool selection, organizational structure, and security team focus
Provide technical direction and final say on security architecture across Engineering
Be accountable to the board for overall security posture and risk acceptance
Help select and rapidly deploy evolving security tools
Requirements
10+ years in security
4+ years leading a security function or major pillar
Experience managing managers/directors and senior technical leaders (Staff+)
Owned company-level security strategy, budget, and outcomes end-to-end at a fast-paced technology company
Hands-on history in at least two of: application/product security, infrastructure security, detection and incident response, enterprise IT and identity, and GRC
Proven success supporting fast-paced software development teams at scale
Experience standing up or scaling a GRC program, including control frameworks, evidence automation, policy, and privacy program management
Experience with SOX, GDPR, PCI, SOC 2, and/or ISO 27001 frameworks
Experience presenting to and working directly with a Board or Audit Committee, external auditors, regulators, or QSAs
Experience with security risk quantification, acceptance, and translating technical risk into business impact
Strong track record hiring security professionals and developing engineers into technical and people leaders
Direct professional experience and notable outcomes driving AI transformation in security, engineering, and/or IT organizations
Experience with Kubernetes-based microservices, Python FastAPI, TypeScript React, Postgres, Redis, Kafka, Elasticsearch, Snowflake, AWS, EKS, MSK, ElastiCache, RDS, Istio, Helm, Terraform, Crossplane, Kyverno, and Datadog is relevant to the technology environment
Benefits
Work from anywhere in the world and choose the hours that suit you best
Expert en stratégie numérique d’identité et sécurité chez Beneva, assureur et fournisseur de services financiers. Définit la feuille de route d’authentification, de validation d’identité et de gestion des accès.
Security Consultant II integrating Akamai security products for government agencies. Advising customers, tuning web security solutions, and improving delivery methodologies.
Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.
Workshop Director delivering cybersecurity and IT advisory workshops for Info - Tech Research Group. Leading client assessments, recommendations, research contributions, and AI capability development.
Senior Security Consultant guiding Akamai customers through security integrations and support. Delivering trusted technical consultancy across the company’s cloud, edge, and security products.
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.