Head of Information Security

About the role

We are looking for a Head of Information Security to lead and expand our security function across application security, security compliance, infrastructure & cloud security, and business application security. The role combines strategic leadership with hands‑on technical work, guiding a small existing team while building it as the company scales.

Key responsibilities

• Build and run an Application Security program, integrating AI‑assisted code reviews and security checks into CI/CD pipelines.
• Deliver developer security training and promote secure coding practices organization‑wide.
• Own ISO 27001 and SOC 2 certifications, manage ongoing audits and develop roadmaps for additional certifications.
• Secure Kubernetes infrastructure and cloud environments, defining standards for infrastructure‑as‑code, network architecture, and access control.
• Partner with engineering to implement secure‑by‑default configurations.
• Secure Microsoft 365 and other line‑of‑business systems (CRM, ERP), managing identity, access, and data protection.
• Oversee third‑party and vendor risk for critical SaaS applications.

Required profile

• 8+ years of experience in information security, including at least 3 years in a leadership role.
• Proven track record running application security programs with CI/CD integration and AI‑assisted tooling.
• Hands‑on experience leading ISO 27001 and/or SOC 2 audits.
• Experience securing business applications such as Microsoft 365, CRM, and ERP, and managing vendor risk.
• Ability to communicate risk and trade‑offs clearly to engineers and executives.

Required skills

• Application security
• CI/CD pipeline integration
• AI‑assisted code review
• ISO 27001
• SOC 2
• Kubernetes
• Cloud security
• Infrastructure‑as‑code
• Network architecture
• Access control
• Microsoft 365
• CRM
• ERP
• Vendor risk management