Head of Information Security

About the role

Constructor is seeking a senior leader to head its information security function. The role will oversee application security, compliance, infrastructure and cloud security, and business application security across a growing, remote‑first organization.

Key responsibilities

• Build and run an application security program, integrating AI‑assisted code reviews and security checks into CI/CD pipelines.
• Lead ISO 27001 and SOC 2 certification efforts and manage ongoing security audits.
• Secure Kubernetes and cloud environments, defining infrastructure‑as‑code and network security standards.
• Partner with engineering to implement secure‑by‑default configurations and champion secure coding practices.
• Manage security for Microsoft 365, CRM, ERP and other line‑of‑business systems, including identity and access controls.
• Oversee third‑party and vendor risk for critical SaaS applications.

Required profile

• 8+ years of experience in information security, with at least 3 years in a leadership role.
• Proven track record running application security programs with CI/CD integration.
• Hands‑on experience delivering ISO 27001 and/or SOC 2 audits.
• Experience securing cloud, Kubernetes and business applications (M365, CRM, ERP).
• Ability to communicate risk and trade‑offs to engineers and executives.

Required skills

• Application security
• CI/CD pipeline integration
• AI‑assisted code review tools
• ISO 27001
• SOC 2
• Kubernetes security
• Infrastructure‑as‑code security standards
• Cloud security (public and sovereign clouds)
• Microsoft 365 security
• CRM and ERP security
• Third‑party/vendor risk management