Writing.io Jobs

Find the best remote jobs. Answer a few questions and we'll deploy a powerful assistant to help you search, create alerts, and more.

1 What roles are you open to?

2 Experience level

3 Work style

Did you know? If memory is enabled, Writing.io can remember your job search preferences and help you to improve your resume, craft customized outreach and more.

Security Head of Trust & Safety at MagicSchool AI

Leads trust and safety for an AI education platform, overseeing LLM guardrails, evaluations, incident response, compliance, and a safety team.

Exec Posted 3 days ago RemoteFirstJobs Product
What this role involves

WHO WE ARE: MagicSchool is the premier generative AI platform for teachers. We’re just over 2 years old, and more than 7 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love.

RESPONSIBILITIES

  • Own the safety of AI output to teachers and students: policy, model-level guardrails, evals, red-teaming, and incident response.

  • Own the trust posture with districts: safety documentation, RFP and school-board responses, and alignment with state AI-in-education guidance.

  • Develop safety evaluations and monitoring as integral components of product infrastructure; ensure that each new tool includes safety acceptance criteria established during the scoping phase, rather than at launch.

  • Own student-facing safety specifically: age-appropriate content, self-harm and crisis handling, and escalation paths to educators.

  • Run the safety incident process end to end and own the postmortem loop back into product and engineering.

  • Partner with Legal on COPPA, FERPA, state privacy laws, and emerging AI regulation. T&S owns the operational reality; Legal owns the legal position.

  • Build and lead a small team (1–3 to start), scaling the function through 2027.

QUALIFICATIONS / COMPETENCIES / SKILLS

Must Haves

  • Has owned trust & safety or responsible AI for a consumer or youth-facing product at scale: real incidents, real policy decisions, real regulators.

  • Hands-on with LLM safety: evals, classifiers, prompt/system-level guardrails, red-teaming. Can read an eval result and say what to change.

  • Has made safety a velocity enabler, not friction — builds guardrails as infrastructure so teams ship faster with confidence.

  • Makes judgment calls under ambiguity and owns them publicly, to districts and to the exec team.

  • Strong writer: safety docs, district-facing explainers, incident communications.

  • Operates hypothesis-first and escalates one-way doors fast rather than sitting on them.

Nice to Haves

  • K-12 or youth-platform experience (GoGuardian, Securly, Roblox, Discord, YouTube Kids, Epic Games).

  • Familiarity with state AI-in-education frameworks and district procurement questionnaires.

  • Prior work with child-safety NGOs or standards bodies (Common Sense Media, NCMEC, Thorn, ISTE).

  • Data/ML fluency to partner directly with engineering on classifiers and eval pipelines.

  • Comfortable being the external face of safety at conferences, with press, and in front of district boards.

REQUIRED EXPERIENCE

  • Proven ownership of trust & safety or responsible AI at a consumer or youth-facing product at scale.

  • Hands-on experience with LLM safety tooling: evals, classifiers, and red-teaming.

  • Experience handling live incidents involving minors or vulnerable users.

  • Track record of building safety as product infrastructure, not a gate.

  • Demonstrated ability to communicate safety tradeoffs clearly to executive and district-level audiences.

TECH STACK

  • LLM layer: multi-provider (OpenAI / Anthropic / Google via GCP Vertex); moderation APIs and custom classifiers.

  • Eval and red-team tooling (to be built out); Datadog for output observability and alerting.

  • Product stack context: TypeScript / Next.js on Vercel, Supabase (PostgreSQL) backend.

  • Incident and knowledge tooling: Linear, Slack workflows, Notion.

Why Join Us?

  • Work on cutting-edge AI technology that directly impacts educators and students.

  • Join a mission-driven team passionate about making education more efficient and equitable.

  • Flexibility of working from home, while fostering a unique culture built on relationships, trust, communication, and collaboration with our team - no matter where they live.

For full time employees:

  • Unlimited time off to empower our employees to manage their work-life balance. We work hard for our teachers and users, and encourage our employees to rest and take the time they need.

  • Choice of employer-paid health insurance plans so that you can take care of yourself and your family. Dental and vision are also offered at very low premiums.

  • Every employee is offered generous stock options, vested over 4 years.

  • 401k match & monthly wellness stipend.

Our Values:

  • Educators are Magic:  Educators are the most important ingredient in the educational process - they are the magic, not the AI. Trust them, empower them, and put them at the center of leading change in service of students and families.

  • Joy and Magic: Bring joy and magic into every learning experience - push the boundaries of what’s possible with AI.

  • Community:  Foster community that supports one another during a time of rapid technological change. Listen to them and serve their needs.

  • Innovation:  The education system is outdated and in need of innovation and change - AI is an opportunity to bring equity, access, and serve the individual needs of students better than we ever have before.

  • Responsibility: Put responsibility and safety at the forefront of the technological change that AI is bringing to education.

  • Diversity: Diversity of thought, perspectives, and backgrounds helps us serve the wide audience of educators and students around the world.

  • Excellence:  Educators and students deserve the best - and we strive for the highest quality in everything we do.

Read the full description
Security Head of Trust & Safety at MagicSchool AI

Leads trust and safety for an AI education platform, overseeing LLM guardrails, evaluations, incident response, compliance partnerships, and a safety team.

Exec Posted 3 days ago RemoteFirstJobs Product
What this role involves

WHO WE ARE: MagicSchool is the premier generative AI platform for teachers. We’re just over 2 years old, and more than 7 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love.

RESPONSIBILITIES

  • Own the safety of AI output to teachers and students: policy, model-level guardrails, evals, red-teaming, and incident response.

  • Own the trust posture with districts: safety documentation, RFP and school-board responses, and alignment with state AI-in-education guidance.

  • Develop safety evaluations and monitoring as integral components of product infrastructure; ensure that each new tool includes safety acceptance criteria established during the scoping phase, rather than at launch.

  • Own student-facing safety specifically: age-appropriate content, self-harm and crisis handling, and escalation paths to educators.

  • Run the safety incident process end to end and own the postmortem loop back into product and engineering.

  • Partner with Legal on COPPA, FERPA, state privacy laws, and emerging AI regulation. T&S owns the operational reality; Legal owns the legal position.

  • Build and lead a small team (1–3 to start), scaling the function through 2027.

QUALIFICATIONS / COMPETENCIES / SKILLS

Must Haves

  • Has owned trust & safety or responsible AI for a consumer or youth-facing product at scale: real incidents, real policy decisions, real regulators.

  • Hands-on with LLM safety: evals, classifiers, prompt/system-level guardrails, red-teaming. Can read an eval result and say what to change.

  • Has made safety a velocity enabler, not friction — builds guardrails as infrastructure so teams ship faster with confidence.

  • Makes judgment calls under ambiguity and owns them publicly, to districts and to the exec team.

  • Strong writer: safety docs, district-facing explainers, incident communications.

  • Operates hypothesis-first and escalates one-way doors fast rather than sitting on them.

Nice to Haves

  • K-12 or youth-platform experience (GoGuardian, Securly, Roblox, Discord, YouTube Kids, Epic Games).

  • Familiarity with state AI-in-education frameworks and district procurement questionnaires.

  • Prior work with child-safety NGOs or standards bodies (Common Sense Media, NCMEC, Thorn, ISTE).

  • Data/ML fluency to partner directly with engineering on classifiers and eval pipelines.

  • Comfortable being the external face of safety at conferences, with press, and in front of district boards.

REQUIRED EXPERIENCE

  • Proven ownership of trust & safety or responsible AI at a consumer or youth-facing product at scale.

  • Hands-on experience with LLM safety tooling: evals, classifiers, and red-teaming.

  • Experience handling live incidents involving minors or vulnerable users.

  • Track record of building safety as product infrastructure, not a gate.

  • Demonstrated ability to communicate safety tradeoffs clearly to executive and district-level audiences.

TECH STACK

  • LLM layer: multi-provider (OpenAI / Anthropic / Google via GCP Vertex); moderation APIs and custom classifiers.

  • Eval and red-team tooling (to be built out); Datadog for output observability and alerting.

  • Product stack context: TypeScript / Next.js on Vercel, Supabase (PostgreSQL) backend.

  • Incident and knowledge tooling: Linear, Slack workflows, Notion.

Why Join Us?

  • Work on cutting-edge AI technology that directly impacts educators and students.

  • Join a mission-driven team passionate about making education more efficient and equitable.

  • Flexibility of working from home, while fostering a unique culture built on relationships, trust, communication, and collaboration with our team - no matter where they live.

For full time employees:

  • Unlimited time off to empower our employees to manage their work-life balance. We work hard for our teachers and users, and encourage our employees to rest and take the time they need.

  • Choice of employer-paid health insurance plans so that you can take care of yourself and your family. Dental and vision are also offered at very low premiums.

  • Every employee is offered generous stock options, vested over 4 years.

  • 401k match & monthly wellness stipend.

Our Values:

  • Educators are Magic:  Educators are the most important ingredient in the educational process - they are the magic, not the AI. Trust them, empower them, and put them at the center of leading change in service of students and families.

  • Joy and Magic: Bring joy and magic into every learning experience - push the boundaries of what’s possible with AI.

  • Community:  Foster community that supports one another during a time of rapid technological change. Listen to them and serve their needs.

  • Innovation:  The education system is outdated and in need of innovation and change - AI is an opportunity to bring equity, access, and serve the individual needs of students better than we ever have before.

  • Responsibility: Put responsibility and safety at the forefront of the technological change that AI is bringing to education.

  • Diversity: Diversity of thought, perspectives, and backgrounds helps us serve the wide audience of educators and students around the world.

  • Excellence:  Educators and students deserve the best - and we strive for the highest quality in everything we do.

Read the full description
Security Cybersecurity Co-Founder / Head of Growth (100 % remote) (m/f/d)

Leads cybersecurity startup creation and growth as a co-founder and head of growth.

Exec Remote Posted 4 days ago Himalayas
What this role involves
We are looking to hire ambitious entrepreneurs to start and scale their own startups.
Read the full description
Security Director, Information Security

Leads the organization's information security strategy, programs, risk management, and security operations.

Exec Posted 5 days ago Jobicy AI
What this role involves
About Carrot: Carrot is the leading global fertility and family care platform, built on intelligent care orchestration: the right clinical guidance, at the right moment, in the context of each...
Read the full description
Security Director of Expert Services, Security and Risk at ServiceNow

Leads security and risk services delivery, consultants, customer implementations, AI-powered security automation, and regional business strategy across the Americas.

Exec Posted 5 days ago RemoteFirstJobs Product
What this role involves

Company Description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We’re building an AI-native culture where technology and talent are unstoppable together. And we’re just getting started.

Join us to put AI to work for people.

Job Description

The Team

As part of Delivery Excellence, our Security and Risk Services team empowers enterprises to build resilience and strengthen their operational and security posture across their most critical risk and compliance domains. We partner closely with customers to drive security adoption, risk mitigation, compliance excellence, and demonstrable business value through our Security and Risk product portfolio.

The Role

As Director, Security and Risk Services (Americas), you will lead services delivery execution for Security and Risk customers across the US and Canada. You will manage senior-level technical consultants and Business Process Consultants (BPCs) to deliver transformative solutions while driving key strategic initiatives. You will be instrumental in expanding the ServiceNow Security and Risk footprint, ensuring delivery excellence, nurturing deep customer relationships, and maximizing customer value realization in the security and risk domain.

What you’ll do:

Strategic leadership & security innovation

  • Manage delivery execution for a team of senior-level technical consultants and Business Process Consultants, ensuring successful delivery of strategic transformation initiatives and customer implementations.
  • Partner with the Acceleration & Modernization (A&M) team to lead programmatic rollout of AI-powered security and risk automation capabilities, driving adoption of intelligent tools that enhance consultant productivity, accelerate time-to-value, and optimize delivery outcomes.
  • Partner with Director of Security & Risk, Practice leader to develop and execute a comprehensive business plan for Security and Risk Services across the Americas, focusing on market expansion, differentiation, and customer success within key product areas.
  • Work with Product Excellence (PEx) to drive global standards on best practice development, adoption, and new product introduction (NPI) in the security and risk domain.
  • Lead regional sales strategies, drive portfolio performance, and achieve or exceed services revenue targets for the Security and Risk Services portfolio.
  • Stay informed of security trends, regulatory landscape changes, and emerging risk management opportunities to enhance and expand ServiceNow Security and Risk adoption.

Customer success & delivery excellence

  • Provide active, visible leadership to your team of technical consultants and BPCs, fostering a high-performance and customer-centric delivery culture.
  • Build and maintain strong executive relationships with key customer stakeholders, including Chief Information Security Officers, Chief Risk Officers, Chief Compliance Officers, Chief Information Officers, and business transformation leaders.
  • Champion high-quality delivery and customer satisfaction, leading continuous improvement initiatives globally and locally. Establish and manage delivery quality standards spanning sales support through hyper-care, including oversight of both internal resources and delivery partners to ensure consistent, world-class customer outcomes.
  • Engage with senior customer leaders to shape security and risk transformation roadmaps, optimize risk management processes, and drive successful business outcomes.
  • Monitor key delivery metrics and team performance, using insights to improve operational efficiency, service excellence, and consultant productivity.
  • Travel up to 40% annually based on business and customer needs.

Cross-functional collaboration & ecosystem leadership

  • Drive collaboration with cross-functional teams across Product, Sales, Customer Excellence Group (CEG), Marketing, Training, Sales Enablement, and Partner organizations to ensure seamless implementation and expansion of Security and Risk solutions.
  • Lead strategic alignment with ServiceNow technology and implementation partners, supporting joint business goals and ecosystem growth.
  • Mentor and guide ServiceNow Security and Risk consultants and partner ecosystem resources, building capability and expertise within the practice.
  • Engage with industry communities and regulatory bodies to represent ServiceNow, share best practices, and demonstrate thought leadership in security and risk domains.

Qualifications

Core experience & expertise

  • 12+ years of leadership experience in Enterprise Security Services, Risk Management Consulting, Customer Success, and Governance Risk & Compliance, with a proven track record delivering solutions across security operations, risk management, and compliance domains at scale.
  • Extensive consulting experience within global, enterprise-scale organizations, with focus on managed delivery of security operations, risk management, governance and compliance, or related ServiceNow Security and Risk solutions.
  • Deep understanding of the security and risk management landscape, including ServiceNow platform capabilities, and familiarity with industry competitors, trends, and regulatory requirements.
  • Demonstrated expertise leading and scaling technical consulting teams and delivery organizations, particularly in cloud-based and SaaS security and risk management solutions.
  • Proven ability to manage complex customer engagements and strategic transformation initiatives while directing technical and consulting resources to achieve business outcomes.

Executive engagement & leadership

  • Proven ability to consult, influence, and establish credibility with executive-level stakeholders, including CISOs, Chief Risk Officers, Chief Compliance Officers, CIOs, and other business leaders.
  • Exceptional people leadership skills, including coaching, mentoring, and talent development of technical and consulting teams.
  • Ability to lead and inspire teams—both direct reports and those in matrix relationships—toward common goals and outcomes.
  • Dedication to customer success, delivery excellence, and continuous improvement.

Technical & ServiceNow knowledge

  • Extensive experience delivering customer success and services in the security and risk domain, with deep understanding of operational challenges, business priorities, and security transformation drivers.
  • ServiceNow security and risk management experience and certifications are highly desirable.
  • Strong passion for technology and digital transformation, and its impact on enterprise security posture, risk reduction, and operational resilience.

Collaboration & communication

  • Experience leading cross-functional teams across Product, Marketing, Training, Sales, Sales Enablement, and external partner organization a plus.
  • Ability to communicate complex security and risk management solutions clearly to diverse audiences, both technical and non-technical, including business executives.
  • Outstanding organizational, time management, and communication skills (written, verbal, and presentation).

Additional Information

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity,  veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

Read the full description
Security Director of Expert Services, Security and Risk at ServiceNow

Leads Security and Risk services delivery across the Americas, managing consultants, customer implementations, strategic initiatives, and security automation adoption.

Exec Posted 5 days ago RemoteFirstJobs Product
What this role involves

Company Description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We’re building an AI-native culture where technology and talent are unstoppable together. And we’re just getting started.

Join us to put AI to work for people.

Job Description

The Team

As part of Delivery Excellence, our Security and Risk Services team empowers enterprises to build resilience and strengthen their operational and security posture across their most critical risk and compliance domains. We partner closely with customers to drive security adoption, risk mitigation, compliance excellence, and demonstrable business value through our Security and Risk product portfolio.

The Role

As Director, Security and Risk Services (Americas), you will lead services delivery execution for Security and Risk customers across the US and Canada. You will manage senior-level technical consultants and Business Process Consultants (BPCs) to deliver transformative solutions while driving key strategic initiatives. You will be instrumental in expanding the ServiceNow Security and Risk footprint, ensuring delivery excellence, nurturing deep customer relationships, and maximizing customer value realization in the security and risk domain.

What you’ll do:

Strategic leadership & security innovation

  • Manage delivery execution for a team of senior-level technical consultants and Business Process Consultants, ensuring successful delivery of strategic transformation initiatives and customer implementations.
  • Partner with the Acceleration & Modernization (A&M) team to lead programmatic rollout of AI-powered security and risk automation capabilities, driving adoption of intelligent tools that enhance consultant productivity, accelerate time-to-value, and optimize delivery outcomes.
  • Partner with Director of Security & Risk, Practice leader to develop and execute a comprehensive business plan for Security and Risk Services across the Americas, focusing on market expansion, differentiation, and customer success within key product areas.
  • Work with Product Excellence (PEx) to drive global standards on best practice development, adoption, and new product introduction (NPI) in the security and risk domain.
  • Lead regional sales strategies, drive portfolio performance, and achieve or exceed services revenue targets for the Security and Risk Services portfolio.
  • Stay informed of security trends, regulatory landscape changes, and emerging risk management opportunities to enhance and expand ServiceNow Security and Risk adoption.

Customer success & delivery excellence

  • Provide active, visible leadership to your team of technical consultants and BPCs, fostering a high-performance and customer-centric delivery culture.
  • Build and maintain strong executive relationships with key customer stakeholders, including Chief Information Security Officers, Chief Risk Officers, Chief Compliance Officers, Chief Information Officers, and business transformation leaders.
  • Champion high-quality delivery and customer satisfaction, leading continuous improvement initiatives globally and locally. Establish and manage delivery quality standards spanning sales support through hyper-care, including oversight of both internal resources and delivery partners to ensure consistent, world-class customer outcomes.
  • Engage with senior customer leaders to shape security and risk transformation roadmaps, optimize risk management processes, and drive successful business outcomes.
  • Monitor key delivery metrics and team performance, using insights to improve operational efficiency, service excellence, and consultant productivity.
  • Travel up to 40% annually based on business and customer needs.

Cross-functional collaboration & ecosystem leadership

  • Drive collaboration with cross-functional teams across Product, Sales, Customer Excellence Group (CEG), Marketing, Training, Sales Enablement, and Partner organizations to ensure seamless implementation and expansion of Security and Risk solutions.
  • Lead strategic alignment with ServiceNow technology and implementation partners, supporting joint business goals and ecosystem growth.
  • Mentor and guide ServiceNow Security and Risk consultants and partner ecosystem resources, building capability and expertise within the practice.
  • Engage with industry communities and regulatory bodies to represent ServiceNow, share best practices, and demonstrate thought leadership in security and risk domains.

Qualifications

Core experience & expertise

  • 12+ years of leadership experience in Enterprise Security Services, Risk Management Consulting, Customer Success, and Governance Risk & Compliance, with a proven track record delivering solutions across security operations, risk management, and compliance domains at scale.
  • Extensive consulting experience within global, enterprise-scale organizations, with focus on managed delivery of security operations, risk management, governance and compliance, or related ServiceNow Security and Risk solutions.
  • Deep understanding of the security and risk management landscape, including ServiceNow platform capabilities, and familiarity with industry competitors, trends, and regulatory requirements.
  • Demonstrated expertise leading and scaling technical consulting teams and delivery organizations, particularly in cloud-based and SaaS security and risk management solutions.
  • Proven ability to manage complex customer engagements and strategic transformation initiatives while directing technical and consulting resources to achieve business outcomes.

Executive engagement & leadership

  • Proven ability to consult, influence, and establish credibility with executive-level stakeholders, including CISOs, Chief Risk Officers, Chief Compliance Officers, CIOs, and other business leaders.
  • Exceptional people leadership skills, including coaching, mentoring, and talent development of technical and consulting teams.
  • Ability to lead and inspire teams—both direct reports and those in matrix relationships—toward common goals and outcomes.
  • Dedication to customer success, delivery excellence, and continuous improvement.

Technical & ServiceNow knowledge

  • Extensive experience delivering customer success and services in the security and risk domain, with deep understanding of operational challenges, business priorities, and security transformation drivers.
  • ServiceNow security and risk management experience and certifications are highly desirable.
  • Strong passion for technology and digital transformation, and its impact on enterprise security posture, risk reduction, and operational resilience.

Collaboration & communication

  • Experience leading cross-functional teams across Product, Marketing, Training, Sales, Sales Enablement, and external partner organization a plus.
  • Ability to communicate complex security and risk management solutions clearly to diverse audiences, both technical and non-technical, including business executives.
  • Outstanding organizational, time management, and communication skills (written, verbal, and presentation).

Additional Information

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity,  veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

Read the full description
Security Chief Information Security Officer

Leads the organization's information security strategy, risk management, compliance, and protection of systems and data.

Exec Posted 6 days ago Jobicy AI
What this role involves
Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk...
Read the full description
Security Head of Security Engineering

Leads security engineering strategy, teams, and initiatives to protect the company’s systems and user data.

Exec Posted 8 days ago Jobicy AI
What this role involves
Who are we and why should you join us? BetterHelp is on a mission to remove the traditional barriers to therapy and make mental health care more accessible to everyone....
Read the full description
Security Head of Security

Leads the company’s security strategy, programs, risk management, and protection of its global payouts platform.

Exec Posted 11 days ago Jobicy AI
What this role involves
Tremendous is the global platform built for businesses to send payouts—gift cards and money—to anyone, anywhere, instantly. We’re trusted by 20,000+ organizations, from startups to giants like Atlassian, MIT, and...
Read the full description
Security HQ - CISO - EMEA Remote at Job&Talent

Leads global information security strategy, risk management, security operations, cloud and product security, compliance, and security organization development.

Exec Remote Posted 12 days ago RemoteFirstJobs Product
What this role involves

Join us to shape the future of work: your next adventure awaits!

About the Role

Job&Talent is looking for a Chief Information Security Officer (CISO) to own and lead the company’s global information security strategy, organization, and execution.

Reporting directly to the CTO, the CISO will be responsible for protecting Job&Talent’s technology, infrastructure, products, corporate environment, and data while enabling the company to move quickly and safely.

Job&Talent operates a large-scale technology product supporting critical workforce processes, including hiring, worker management, clocking, payroll-related workflows, and increasingly AI-powered capabilities. This creates a broad security surface spanning cloud infrastructure, SaaS, endpoints, identity, product security, sensitive personal data, AI systems, third-party vendors, and multiple regulatory environments.

The CISO will therefore need to combine deep technical security expertise, strong operational execution, risk management, GRC understanding, and executive leadership.

We are looking for someone who can understand how systems actually work, identify the risks that matter, prioritize them pragmatically, and build the technology, processes, teams, and culture required to address them.

What you’ll own

Strategy, Leadership & Executive Oversight

  • Own and continuously evolve Job&Talent’s global information security strategy and roadmap, ensuring security investment is aligned with the company’s actual risk profile and business priorities.
  • Translate technical security risks into clear business risks and provide the CTO and executive team with an accurate view of the company’s security posture.
  • Establish measurable security objectives, KPIs, KRIs and risk-acceptance processes.
  • Build a security organization capable of supporting a fast-moving global technology company without creating unnecessary friction for Engineering or the business.

Product, Application & Cloud Security

  • Own the security lifecycle across Job&Talent’s products and engineering organization, including threat modelling, architecture reviews, secure development, application and supply-chain security, vulnerability management and security testing.
  • Own security architecture across cloud infrastructure and platform environments, ensuring security is embedded into architecture and technology decisions from the beginning.
  • Partner closely with Engineering, Platform and SRE to integrate security into development and infrastructure processes.
  • Provide appropriate security governance for AI-powered products, agents, and LLM integrations.

Identity, Corporate & Data Security

  • Own security across Job&Talent’s corporate technology environment, including identity and access management, privileged access, endpoint and SaaS security, and corporate network security.
  • Drive the organization toward a Zero Trust model where access decisions consider identity, device posture, risk, and context.
  • Own the technical controls required to protect sensitive data throughout its lifecycle, including data access, encryption, monitoring and data-loss prevention.
  • Partner closely with Legal, Privacy and the DPO on applicable privacy requirements while maintaining a clear distinction between privacy governance and technical security ownership.

Security Operations & Incident Response

  • Build and continuously improve Job&Talent’s ability to detect, investigate, contain and recover from security incidents.
  • Own security monitoring, detection engineering, incident response and threat intelligence capabilities.
  • Ensure significant security incidents are handled with strong operational discipline and effective coordination across technical, business and executive stakeholders.
  • Drive continuous improvement through incident reviews, remediation and lessons learned.

Governance, Risk & Third-Party Security

  • Maintain and evolve Job&Talent’s security management framework, risk management and compliance programs, including ISO 27001, SOC 2 Type II, GDPR and applicable customer and regulatory security requirements.
  • Maintain clear ownership, remediation and risk acceptance while automating compliance and control monitoring wherever practical.
  • Own security risk management across Job&Talent’s technology and vendor ecosystem, ensuring third-party risk is assessed based on actual exposure and impact.

AI Security & Governance

  • Establish the technical security framework for AI across Job&Talent products and internal use.
  • Address emerging risks related to data access, AI agents, authentication and authorization, data exfiltration, model and provider risk, and shadow AI.
  • Partner with Legal and Privacy on regulatory requirements, including the EU AI Act, while maintaining ownership of the required technical security controls.

Security Culture & Organization

  • Build and develop a strong security organization with clear ownership and accountability.
  • Build a strong security culture across Job&Talent, embedding security into how Engineering, Product, IT, and business teams make decisions.
  • Develop targeted security education and effective security champion programs where they provide value.

Experience Required:

  • 10+ years of experience in information security, with significant experience within global software technology product companies.
  • 5+ years in significant security leadership roles within technology, SaaS, marketplace, fintech, HR-tech or similarly data-intensive product environments.
  • 2+ years as a CISO, VP Security or equivalent senior security leader within a global SaaS or software technology product company.
  • Experience leading security across both product technology and corporate IT environments.
  • Strong track record across Product and Application Security, cloud security and modern security architecture.
  • Demonstrated experience building or operating mature Security Operations and Incident Response capabilities.
  • Deep understanding of modern identity architecture, IAM, SSO, device trust and Zero Trust principles.
  • Experience protecting significant volumes of personal or otherwise sensitive data and managing SaaS and third-party security risks.
  • Experience with ISO 27001, SOC 2, GDPR and enterprise customer security requirements.
  • Familiarity with AI security and emerging risks associated with LLM-based applications and AI agents.
  • Experience partnering with Engineering, Platform, SRE, IT, Legal and Privacy teams, as well as executive leadership.

Skills & Competencies:

  • Technical Credibility: Ability to engage deeply with architecture, infrastructure, identity, applications, cloud security and incidents, independently assessing technical risks.

  • Risk-Driven Thinking: Ability to distinguish theoretical vulnerabilities and compliance gaps from risks that could materially impact the business, and prioritize security efforts accordingly.

  • Pragmatic Approach: Ability to balance security requirements with business priorities, enabling Engineering and the wider organization to operate securely without unnecessary friction.

  • Data-Driven Leadership: Ability to quantify security posture, establish meaningful metrics and demonstrate whether risk is increasing or decreasing.

  • Hands-On Mindset: Ability to move between executive-level discussions and detailed technical investigations when required.

  • Engineering Collaboration: Ability to establish strong partnerships with Engineering teams, collaborate on technical decisions and integrate security into engineering practices.

  • Incident Leadership: Ability to make clear decisions under uncertainty and coordinate technical, business, privacy and legal stakeholders during security incidents.

  • Organizational Leadership: Ability to build and develop effective security capabilities, determining what should be owned internally, automated, outsourced or supported by specialist expertise.

#LI-OK1

About us

Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.

Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle — from recruitment and planning to time and attendance, performance, cost management, and communication.

It delivers measurable improvements in the areas that matter most: fulfilment, attendance, retention, and workforce quality. Our platform strength is rooted in unique experience: placing millions of workers over the years and serving thousands of blue-chip clients across delivery, logistics, manufacturing, e-commerce, retail, and hospitality.

Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America and is backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.

Join our community and make an impact

Innovation, high standards, and analytical thinking are in our DNA. Everyone has a voice here, and that voice matters. It’s how we stay sharp, move fast, and make decisions that keep us ahead of the curve.

You’ll take full ownership of your work, collaborate across borders, and grow by doing. Around here, you’ll hear a lot about 10x experiences, human-centered design, and the power of AI. But what truly sets us apart is our people: Our diverse team brings unique perspectives, deep commitment and real-world experience to the table.

We champion empathy, honesty, and inclusion. Because when people can be their authentic selves, incredible things happen—for our workers, our clients, and for each other.

And we reward that impact—with competitive pay, meaningful benefits, and the opportunity to shape what work looks like for millions around the globe.

If you’re ready to make a real impact at scale, you’re in the right place.

Proud to champion equality

At Job&Talent we value diversity and we’re an Equal Opportunity Employer. We welcome applications from all suitably qualified people regardless of national origin, race, disability, religious beliefs or sexual orientation. Come join us. We look forward to your application.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Read the full description
Security HQ - CISO - EMEA Remote at Job&Talent

Leads global information security strategy, teams, risk management, product and cloud security, compliance, and executive security oversight.

Exec Remote Posted 12 days ago RemoteFirstJobs Product
What this role involves

Join us to shape the future of work: your next adventure awaits!

About the Role

Job&Talent is looking for a Chief Information Security Officer (CISO) to own and lead the company’s global information security strategy, organization, and execution.

Reporting directly to the CTO, the CISO will be responsible for protecting Job&Talent’s technology, infrastructure, products, corporate environment, and data while enabling the company to move quickly and safely.

Job&Talent operates a large-scale technology product supporting critical workforce processes, including hiring, worker management, clocking, payroll-related workflows, and increasingly AI-powered capabilities. This creates a broad security surface spanning cloud infrastructure, SaaS, endpoints, identity, product security, sensitive personal data, AI systems, third-party vendors, and multiple regulatory environments.

The CISO will therefore need to combine deep technical security expertise, strong operational execution, risk management, GRC understanding, and executive leadership.

We are looking for someone who can understand how systems actually work, identify the risks that matter, prioritize them pragmatically, and build the technology, processes, teams, and culture required to address them.

What you’ll own

Strategy, Leadership & Executive Oversight

  • Own and continuously evolve Job&Talent’s global information security strategy and roadmap, ensuring security investment is aligned with the company’s actual risk profile and business priorities.
  • Translate technical security risks into clear business risks and provide the CTO and executive team with an accurate view of the company’s security posture.
  • Establish measurable security objectives, KPIs, KRIs and risk-acceptance processes.
  • Build a security organization capable of supporting a fast-moving global technology company without creating unnecessary friction for Engineering or the business.

Product, Application & Cloud Security

  • Own the security lifecycle across Job&Talent’s products and engineering organization, including threat modelling, architecture reviews, secure development, application and supply-chain security, vulnerability management and security testing.
  • Own security architecture across cloud infrastructure and platform environments, ensuring security is embedded into architecture and technology decisions from the beginning.
  • Partner closely with Engineering, Platform and SRE to integrate security into development and infrastructure processes.
  • Provide appropriate security governance for AI-powered products, agents, and LLM integrations.

Identity, Corporate & Data Security

  • Own security across Job&Talent’s corporate technology environment, including identity and access management, privileged access, endpoint and SaaS security, and corporate network security.
  • Drive the organization toward a Zero Trust model where access decisions consider identity, device posture, risk, and context.
  • Own the technical controls required to protect sensitive data throughout its lifecycle, including data access, encryption, monitoring and data-loss prevention.
  • Partner closely with Legal, Privacy and the DPO on applicable privacy requirements while maintaining a clear distinction between privacy governance and technical security ownership.

Security Operations & Incident Response

  • Build and continuously improve Job&Talent’s ability to detect, investigate, contain and recover from security incidents.
  • Own security monitoring, detection engineering, incident response and threat intelligence capabilities.
  • Ensure significant security incidents are handled with strong operational discipline and effective coordination across technical, business and executive stakeholders.
  • Drive continuous improvement through incident reviews, remediation and lessons learned.

Governance, Risk & Third-Party Security

  • Maintain and evolve Job&Talent’s security management framework, risk management and compliance programs, including ISO 27001, SOC 2 Type II, GDPR and applicable customer and regulatory security requirements.
  • Maintain clear ownership, remediation and risk acceptance while automating compliance and control monitoring wherever practical.
  • Own security risk management across Job&Talent’s technology and vendor ecosystem, ensuring third-party risk is assessed based on actual exposure and impact.

AI Security & Governance

  • Establish the technical security framework for AI across Job&Talent products and internal use.
  • Address emerging risks related to data access, AI agents, authentication and authorization, data exfiltration, model and provider risk, and shadow AI.
  • Partner with Legal and Privacy on regulatory requirements, including the EU AI Act, while maintaining ownership of the required technical security controls.

Security Culture & Organization

  • Build and develop a strong security organization with clear ownership and accountability.
  • Build a strong security culture across Job&Talent, embedding security into how Engineering, Product, IT, and business teams make decisions.
  • Develop targeted security education and effective security champion programs where they provide value.

Experience Required:

  • 10+ years of experience in information security, with significant experience within global software technology product companies.
  • 5+ years in significant security leadership roles within technology, SaaS, marketplace, fintech, HR-tech or similarly data-intensive product environments.
  • 2+ years as a CISO, VP Security or equivalent senior security leader within a global SaaS or software technology product company.
  • Experience leading security across both product technology and corporate IT environments.
  • Strong track record across Product and Application Security, cloud security and modern security architecture.
  • Demonstrated experience building or operating mature Security Operations and Incident Response capabilities.
  • Deep understanding of modern identity architecture, IAM, SSO, device trust and Zero Trust principles.
  • Experience protecting significant volumes of personal or otherwise sensitive data and managing SaaS and third-party security risks.
  • Experience with ISO 27001, SOC 2, GDPR and enterprise customer security requirements.
  • Familiarity with AI security and emerging risks associated with LLM-based applications and AI agents.
  • Experience partnering with Engineering, Platform, SRE, IT, Legal and Privacy teams, as well as executive leadership.

Skills & Competencies:

  • Technical Credibility: Ability to engage deeply with architecture, infrastructure, identity, applications, cloud security and incidents, independently assessing technical risks.

  • Risk-Driven Thinking: Ability to distinguish theoretical vulnerabilities and compliance gaps from risks that could materially impact the business, and prioritize security efforts accordingly.

  • Pragmatic Approach: Ability to balance security requirements with business priorities, enabling Engineering and the wider organization to operate securely without unnecessary friction.

  • Data-Driven Leadership: Ability to quantify security posture, establish meaningful metrics and demonstrate whether risk is increasing or decreasing.

  • Hands-On Mindset: Ability to move between executive-level discussions and detailed technical investigations when required.

  • Engineering Collaboration: Ability to establish strong partnerships with Engineering teams, collaborate on technical decisions and integrate security into engineering practices.

  • Incident Leadership: Ability to make clear decisions under uncertainty and coordinate technical, business, privacy and legal stakeholders during security incidents.

  • Organizational Leadership: Ability to build and develop effective security capabilities, determining what should be owned internally, automated, outsourced or supported by specialist expertise.

#LI-OK1

About us

Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.

Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle — from recruitment and planning to time and attendance, performance, cost management, and communication.

It delivers measurable improvements in the areas that matter most: fulfilment, attendance, retention, and workforce quality. Our platform strength is rooted in unique experience: placing millions of workers over the years and serving thousands of blue-chip clients across delivery, logistics, manufacturing, e-commerce, retail, and hospitality.

Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America and is backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.

Join our community and make an impact

Innovation, high standards, and analytical thinking are in our DNA. Everyone has a voice here, and that voice matters. It’s how we stay sharp, move fast, and make decisions that keep us ahead of the curve.

You’ll take full ownership of your work, collaborate across borders, and grow by doing. Around here, you’ll hear a lot about 10x experiences, human-centered design, and the power of AI. But what truly sets us apart is our people: Our diverse team brings unique perspectives, deep commitment and real-world experience to the table.

We champion empathy, honesty, and inclusion. Because when people can be their authentic selves, incredible things happen—for our workers, our clients, and for each other.

And we reward that impact—with competitive pay, meaningful benefits, and the opportunity to shape what work looks like for millions around the globe.

If you’re ready to make a real impact at scale, you’re in the right place.

Proud to champion equality

At Job&Talent we value diversity and we’re an Equal Opportunity Employer. We welcome applications from all suitably qualified people regardless of national origin, race, disability, religious beliefs or sexual orientation. Come join us. We look forward to your application.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Read the full description
Security Director of Security Engineering at Abnormal AI

Leads security engineering and operations, oversees cloud security architecture and programs, and represents the security organization to executives, customers, and regulators.

Exec Posted 14 days ago RemoteFirstJobs Product
What this role involves

About the Role

Abnormal AI protects organizations from the most sophisticated email and collaboration attacks using behavioral AI. Security is not a bolt-on at Abnormal; it is core to the product we sell and the trust our customers place in us. Our security organization operates a commercial cloud environment and a separate FedRAMP-authorized environment, and we are pursuing increasingly rigorous federal authorizations as we grow.

We are hiring a Director of Security reporting to the CISO and leading the Security Engineering organization. You will build and scale high-performing security teams, own major security programs end to end, and operate autonomously in the CISO’s absence, including representing security to executive leadership, customers, and auditors.

This is a role for a deeply technical leader with a software engineering background who has grown into people leadership. You have built security teams from the ground up, you write and review code and architecture when it matters, and you believe the best security organizations earn their influence through partnership rather than policy enforcement.

Our Security Philosophy

We run security the way the best engineering-led companies do:

  • Security reduces toil. Our job is to make the rest of the company faster and safer at the same time. If a control adds friction without reducing risk, it is a defect.
  • Paved paths, safe by default. We invest in guardrails, golden paths, and secure-by-default infrastructure so the easy choice is the secure choice. We prefer preventing classes of problems over chasing individual findings.
  • Partnership over gatekeeping. Security succeeds only through deep collaboration with engineering, IT, and business teams. We embed with builders, we ship alongside them, and we take on their constraints as our own.
  • Engineering-grade rigor. We treat security problems as engineering problems: automated, measurable, code-reviewed, and continuously improved.

If the security cultures that value freedom and responsibility, context over control, and guardrails over gates resonate with you, you will feel at home here.

What You Will Do

  • Serve as deputy to the CISO: act with full authority in the CISO’s absence and represent the security organization to executives, customers, and regulators.
  • Lead, coach, and grow managers and senior engineers across Security Engineering and Security Operations.
  • Own the security engineering roadmap: cloud security architecture (AWS-first), detection and response, identity, vulnerability management, and secure-by-default platform investments.
  • Drive cross-functional programs with Engineering, IT, and Product, from AI security governance to data perimeter controls to federal compliance initiatives.
  • Set and defend engineering standards for the security organization: everything as code, automated where possible, measured against outcomes rather than activity.
  • Build hiring pipelines and raise the bar on every hire; own performance management, promotion cases, and succession planning within your teams.
  • Translate technical risk into business terms for the executive team and board, and translate business priorities into a coherent security strategy.

Must Haves

  • 10+ years in security or software engineering, including 4+ years managing security teams, ideally including managers of managers or equivalent scope.
  • A genuine software engineering background: you have shipped production software, and you evaluate security solutions the way an engineer would.
  • A proven record of building and scaling high-performing security teams, with alumni who would work for you again.
  • Deep technical fluency in cloud-native environments: AWS organizations and multi-account governance, Kubernetes, identity and access, detection engineering, and modern SDLC security.
  • Demonstrated cross-functional leadership: you have earned the trust of engineering leaders and shipped security outcomes through their teams, not around them.
  • Strong written communication: you produce decision-ready documents and can drive alignment asynchronously.
  • Executive presence: comfortable presenting to C-level leadership, customers, and auditors without preparation from the CISO.

Strong Signals

  • You are currently a security engineering manager or senior manager at a fintech, high-growth startup, or forward-leaning enterprise, and you are ready for broader scope.
  • You have built paved-path or secure-by-default platforms that measurably reduced both risk and developer friction.
  • Experience with compliance-driven environments (FedRAMP, SOC 2, ISO 27001) without letting compliance define the security program.
  • Experience securing AI/ML systems or governing AI adoption at scale.
  • You have operated in environments where security headcount was scarce and automation was the only way to scale.

Why This Role

You will inherit strong teams, an executive staff that treats security as a first-class function, and a CISO who wants a true partner rather than a lieutenant. The scope is broad, the autonomy is real, and the ceiling on this role is defined by what you take on.

#LI-ML1

Actual compensation will be determined based on several non-discriminatory factors including skills, experience, qualifications, and geographic location.

In addition to base salary, this role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.

Base salary range:

$214,200—$308,000 USD

A note on AI in our process: Abnormal AI uses AI-assisted tools to help our recruiting team prepare for candidate interviews. These tools analyze resume content and role requirements to suggest interview questions and areas for the interviewer to explore.They do not make hiring decisions or screen candidates automatically. Every decision about a candidacy is made by a person. Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and Abnormal AI’s policies relevant to our security and privacy standards.

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here. If you would like more information on your EEO rights under the law, please click here.

Read the full description
Security Director, OT/IoT Security Services- Remote (Anywhere in the U.S.) at GuidePoint Security

Leads the OT/IoT security practice, overseeing engineers, service delivery, client escalations, partnerships, sales support, and P&L.

Exec Remote Posted 18 days ago RemoteFirstJobs Product
What this role involves

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

The systems our OT clients run treat drinking water, move natural gas, run production lines, and keep hospital equipment working. Many were installed before anyone thought about attackers, and plenty still run software the vendor stopped supporting years ago. You can’t take a refinery controller offline on a Tuesday afternoon to patch it, and you can’t reboot a substation to check whether a fix worked. This work needs people who understand the physical process as well as the network, and we’ve built a team of them. When we do it well, nobody outside the plant ever hears about it. GuidePoint Security is hiring a Director, OT/IoT Security Services to lead that team.

You’ll report to the SVP of Offensive Security and own the practice: the team, the service catalog, delivery quality, and the P&L. The delivery managers already run day-to-day projects well, so expect to spend most of your time with engineers and clients, and to be the senior escalation point when a technical or client issue gets complicated. The rest goes to supporting regional sales teams, other GuidePoint Security practices, and technology partners.

In this practice, “Wow Them” means an account executive gets a scope and price back quickly, our engineers work safely on a running plant floor, and the client calls us for their next site.

About the OT/IoT Security Services Practice

The OT/IoT Security Services practice protects the industrial systems our clients depend on in energy, water, manufacturing, healthcare, transportation, and other critical infrastructure sectors. We deliver in every GuidePoint Security region and provide the services behind GuidePoint Security’s OT technology partnerships.

Most of the team came to security from the plant floor or the military: veterans and former engineers from utilities, oil and gas, manufacturing, and nuclear power. They know what an operator is thinking when a consultant walks into the control room with a laptop, and safety and uptime come first on every job.

A typical client relationship starts with finding out what’s actually on the OT network and where it’s exposed. From there we design segmentation and controls that don’t interrupt operations, and many clients stay with us for ongoing OT vulnerability management. The work in between includes OT risk assessments against ISA/IEC 62443, NIST SP 800-82, NERC CIP, and the TSA security directives; OT penetration tests scoped for live environments; and deployment and tuning of OT visibility and secure remote access platforms.

OT has problems you won’t find in IT security, like hunting for an attacker on a network that can’t handle an active scan, or explaining a firewall change to someone who has to keep a turbine running. Every site is different, and that’s a big part of why we stay.

What sets the practice apart

  • A multi-vendor OT lab with PLC hardware and several visibility and remote access platforms, so clients can compare them side by side before buying
  • Vendor-objective advice. We work with many platforms and can tell a client which one fits their environment
  • A fast-growing OT practice on track to become one of GuidePoint Security’s top practices, with leadership support and the autonomy to shape the service catalog, lab, and team

Roles and Responsibilities

  • Lead and grow the OT team of managers, engineers, and operations staff while fostering an environment that supports long-term retention. Meet regularly one-on-one with your managers, spend time with the engineers, and stay close enough to active engagements that problems come up early instead of at closeout. Adapt the team structure as the practice scales, guided by input from those performing the work.
  • Build a mentorship program that pairs experienced OT engineers with those who are new to OT or to client-facing services delivery, and define clear career and certification paths. Give engineers supported time in client conversations before asking them to lead one.
  • Standardize how the practice runs: shared templates, delivery playbooks, and a clear path from scoping through closeout for each service, building on what the team already has.
  • Refine the delivery methods the team already uses: OT-safe rules of engagement, passive-first testing, quality review, and coordination with plant operations around change and outage windows.
  • Own the practice’s financials, including bookings, revenue, delivery margin, utilization, and operating cost. Produce a monthly forecast leadership can plan on, and plan staffing and capacity so the team can take on new work without burning out.
  • Support a growing service catalog: OT assessments (ISA/IEC 62443, NIST SP 800-82, NERC CIP, TSA security directives), architecture and segmentation, OT penetration testing, platform implementation and tuning, managed OT vulnerability services, and IoT security services.
  • Make our deployment and operations services the obvious add-on when a client buys an OT platform. Work with technology partners to define a services path for each platform, and report results to clients in terms they can check: assets covered, detections tuned, alerts reviewed, vulnerabilities fixed.
  • Support regional sales leaders and account executives on OT opportunities. Turn scoping requests around quickly, help qualify and price deals, and work on key pursuits and RFPs. The account executive owns the client relationship. Your job is to make bringing in the OT team simple for them.
  • Manage the OT lab. Work with leadership and partners to keep it current, use it for training and presales, and set up a model for charging for workshops and demos.
  • Represent the practice in the OT security community through select speaking, writing, and standards work, while keeping your focus on the team and clients.

Required Experience and Education

  • BS/BA + 7 -10 years of experience OR MS/MA + 5-12 years of experience
  • 5+ years leading people managers on OT/IoT security delivery or consulting teams, including coaching managers as they grow leaders of their own, with accountability for bookings, margin, or utilization
  • Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
  • Experience developing engineers into consultants, presales contributors, or leaders
  • CISSP, GICSP, or GRID, or equivalent experience

Preferred Experience and Education

You don’t need all of these. If you have most of them, or comparable experience, we’d like to hear from you.

  • A recognized presence in the OT/ICS security community, for example speaking at industry events or contributing to standards and research, and a track record peers, partners, and clients can vouch for
  • Hands-on work in industrial environments (ICS, SCADA, DCS, PLCs, safety systems, industrial protocols) as an engineer, operator, integrator, or consultant in utilities, oil and gas, manufacturing, nuclear, transportation, healthcare, or the military
  • Working knowledge of OT frameworks or regulations, such as ISA/IEC 62443, NIST SP 800-82, NERC CIP, or the TSA security directives, and the ability to explain it to both a CISO and a plant manager
  • Experience deploying or tuning OT visibility platforms and working with technology partners
  • Experience turning custom engagements into standard, priced services that a larger sales team sold regularly
  • Additional certifications such as GCIP, ISA/IEC 62443, or CISM

Travel Requirements

  • Up to 30% travel to client industrial sites, regional sales teams, and occasional industry events

Physical Requirements

  • Sedentary work
  • Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
  • Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
  • Occasional travel to client industrial sites, which may involve walking plant floors and entering operational areas, and to conferences that involve prolonged standing or walking

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don’t miss updates on your application.

Why GuidePoint? GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks….

  • Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
  • Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
  • Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
  • 12 corporate holidays and a Flexible Time Off (FTO) program
  • Healthy mobile phone and home internet allowance
  • Eligibility for retirement plan after 2 months at open enrollment
  • Pet Benefit Option
Read the full description
Security Director, Security Assurance and Compliance at Toast

Leads security assurance, compliance engineering, enterprise risk, continuity governance, and automated controls monitoring for a payments platform.

Exec Posted 22 days ago RemoteFirstJobs Product
What this role involves

Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.

Most compliance organizations prove their controls by assembling evidence by hand, once per framework, every year. We are an organization of the future: common controls tested once in code, monitored continuously, and reused across frameworks (including PCI, SOC, SOX, and ISO). You will lead that build for a payments and lending platform where regulatory frameworks have real teeth.

This role represents a strategic shift toward engineered, proactive compliance where trust is continuously measured rather than only periodically asserted in documents. Operating as an independent second line of defense, you will balance rigorous assurance with engineering pragmatism, maintaining the autonomy to assess internal teams while helping them scale through automation.

The position spans both internal transformation and external accountability. Internally, you will drive continuous controls monitoring and risk governance; externally, you will own the evidence base that powers our customer trust surface and sales enablement efforts.

A day in the life (Responsibilities)

  • Drive Engineered Compliance: Build and own continuous controls monitoring, automated evidence collection, and compliance-as-code initiatives so controls are tested once and reused seamlessly across multiple frameworks and certifications.
  • Lead Enterprise Risk & Continuity Governance: Manage overall organizational security risk, third-party and vendor risk, alongside business continuity and disaster recovery governance.
  • Own the Assurance Evidence Base: Maintain and safeguard the independent evidence base underlying our Trust Center and customer security reviews, ensuring absolute integrity while partnering with Customer Trust teams on delivery.
  • Serve as Second Line of Defense: Act as an independent reviewer with the standing and authority to challenge engineering and operational teams, ensuring objective assessment across all security domains.
  • Evolve Team Capabilities: Mentor and upskill the security compliance organization, driving a successful cultural and technical transition from manual auditing to automated compliance engineering.

What you’ll need to thrive (Requirements)

  • Proven Transformation Leadership: Experience leading a security assurance or risk transformation program rather than solely maintaining a steady-state compliance function.
  • Deep Framework Expertise: Strong technical command of major regulatory and security frameworks including PCI, SOC, SOX, and ISO.
  • Hands-on Automation Track Record: Demonstrated success implementing automated controls and continuous evidence collection while upskilling existing team members through the shift.
  • Technical & Pragmatic Mindset: Ability to balance regulatory rigor with engineering constraints, holding your own in deep technical conversations with engineers.
  • People Management Experience: Proven track record leading a team of security, risk, or compliance professionals.

What will help you stand out (Nonessential Skills/Nice to Haves)

  • Background in payments, fintech, or another highly regulated platform business.
  • Direct experience operating within a two-lines-of-defense governance structure.
  • Experience scaling automated compliance architecture within fast-growing cloud environments.

AI at Toast

At Toast, one of our company values is that we’re hungry to build and learn. We believe learning new AI tools empowers us to build for our customers faster, more independently, and with higher quality. We provide these tools across all disciplines, from Engineering and Product to Sales and Support, and are inspired by how our Toasters are already driving real value with them. The people who thrive here are those who embrace changes that let us build more for our customers; it’s a core part of our culture.

Our Total Rewards Philosophy

We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/toast-benefits.

The base salary range for this role is listed below. The starting salary will be determined based on skills, experience, and geographic location. In addition to base salary, our total rewards components include cash compensation (overtime, bonus/commissions if eligible), equity, and benefits. You can learn more about how we align pay with local labor markets in our Geographic Pay Zone Philosophy.

Zone A

$204,000—$326,000 USD

Zone B

$177,000—$283,000 USD

Zone C

$159,000—$254,000 USD

How Toast Uses AI in its Hiring Process

Throughout the hiring process, our goal is to get to know you. We use AI tools to support our recruiters and interviewers with tasks like note-taking, summarization, and documentation of interviews to ensure they can be fully focused on your conversation. All hiring decisions are made by people. We ask that you complete interviews and assessments on your own, without real-time AI tools, recording, or transcription bots, unless we tell you otherwise in advance. To learn more: https://careers.toasttab.com/ai-in-hiring

Our Approach to Hybrid Working

We embrace a hybrid work model that fosters in-person collaboration while valuing individual needs. Our goal is to build a strong culture of connection as we work together to empower the hospitality community, regardless of location. Please visit the Locations page on our career site to learn more about our in-office expectations by region: https://careers.toasttab.com/locations-toast

People Are the Secret Ingredient in Our Recipe for Success

At Toast, our employees are our secret ingredient—when they thrive, we thrive. The restaurant industry brings together people with a wide range of backgrounds, experiences, and perspectives, and we value that same breadth at Toast. We strive to build a culture grounded in authenticity, respect, and humility, where every Toaster has a real opportunity to grow, contribute, and do their best work—raising the bar in delivering exceptional experiences for our customers and each other.

Apply today!

Toast is committed to creating an accessible and inclusive hiring process. As part of this commitment, we strive to provide reasonable accommodations for persons with disabilities to enable them to access the hiring process. If you need an accommodation to access the job application or interview process, please contact candidateaccommodations@toasttab.com.

---—

For roles in the United States, it is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Read the full description
Security Director, Customer Trust at Toast

Leads Toast’s customer trust program, security governance, reporting, business operations, and security culture initiatives.

Exec Posted 22 days ago RemoteFirstJobs Product
What this role involves

Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.

Our customers trust us with their payments, their staff data, and the system their restaurant runs on. We hold ourselves to a high bar in protecting it. This role’s job is to make that provable — to a restaurant group’s IT team, to an enterprise procurement reviewer, and to a regulator — fast enough that security becomes a reason we win deals rather than a step that slows them down.

This is one of the clearest expressions of a broader shift underway in Toast’s new Trust & Security organization: moving from a compliance-led, reactive function toward one that’s engineering-led and proactive, where trust is treated as a product rather than asserted in documents. Customer Trust is the business engine of that shift.

The role has two halves, and we want to be upfront about that. The first is external customer-facing: you own how Toast demonstrates its security to the market. The second focuses on our internal customers and stakeholders: you own the planning and operating rhythm of the security organization itself. Both are senior work, and the combination will have significant impact across the company.

A day in the life (Responsibilities)

  • Run the Customer Trust Program: Own the Trust Center, customer security reviews and questionnaires, and how we support the sales team. You own the customer-facing surface — the Trust Center, the review process, and the relationship with sales. Our Security Assurance & Compliance team produces the underlying evidence; you decide how it’s presented and how fast it moves.
  • Lead Governance and Reporting: Own policy, security measurement, and the reporting rhythm for leadership, the board, and regulators, so each audience is working from a rhythm they trust.
  • Run Security Business Operations: Own portfolio management, joint planning, and workforce and budget planning for the security organization; write the budget and headcount case that leadership believes.
  • Build Security Culture: Build awareness and design our champions program so it extends the security function’s reach without adding headcount.

What you’ll need to thrive (Requirements)

  • You’ve built a customer-facing trust or assurance program for a platform business — a Trust Center, a customer security review function, or a security sales-support motion.
  • You work comfortably where security, sales, and executive communication meet, and you can translate security posture into business terms.
  • Strong program and portfolio management, and you can write a budget and headcount case that people believe.
  • You’ve presented to executives, boards, and regulators.
  • You’ve led a team of 10 or more, including managers.

What will help you stand out (Nonessential Skills/Nice to Haves)

  • Payments, fintech, or another regulated platform business.
  • A background spanning both a technical security function and a customer-facing one.
  • Experience turning a security program into an asset the sales team relies on.

AI at Toast

At Toast, one of our company values is that we’re hungry to build and learn. We believe learning new AI tools empowers us to build for our customers faster, more independently, and with higher quality. We provide these tools across all disciplines, from Engineering and Product to Sales and Support, and are inspired by how our Toasters are already driving real value with them. The people who thrive here are those who embrace changes that let us build more for our customers; it’s a core part of our culture.

Our Total Rewards Philosophy

We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/toast-benefits.

The base salary range for this role is listed below. The starting salary will be determined based on skills, experience, and geographic location. In addition to base salary, our total rewards components include cash compensation (overtime, bonus/commissions if eligible), equity, and benefits. You can learn more about how we align pay with local labor markets in our Geographic Pay Zone Philosophy.

Zone A

$204,000—$326,000 USD

Zone B

$177,000—$283,000 USD

Zone C

$159,000—$254,000 USD

How Toast Uses AI in its Hiring Process

Throughout the hiring process, our goal is to get to know you. We use AI tools to support our recruiters and interviewers with tasks like note-taking, summarization, and documentation of interviews to ensure they can be fully focused on your conversation. All hiring decisions are made by people. We ask that you complete interviews and assessments on your own, without real-time AI tools, recording, or transcription bots, unless we tell you otherwise in advance. To learn more: https://careers.toasttab.com/ai-in-hiring

Our Approach to Hybrid Working

We embrace a hybrid work model that fosters in-person collaboration while valuing individual needs. Our goal is to build a strong culture of connection as we work together to empower the hospitality community, regardless of location. Please visit the Locations page on our career site to learn more about our in-office expectations by region: https://careers.toasttab.com/locations-toast

People Are the Secret Ingredient in Our Recipe for Success

At Toast, our employees are our secret ingredient—when they thrive, we thrive. The restaurant industry brings together people with a wide range of backgrounds, experiences, and perspectives, and we value that same breadth at Toast. We strive to build a culture grounded in authenticity, respect, and humility, where every Toaster has a real opportunity to grow, contribute, and do their best work—raising the bar in delivering exceptional experiences for our customers and each other.

Apply today!

Toast is committed to creating an accessible and inclusive hiring process. As part of this commitment, we strive to provide reasonable accommodations for persons with disabilities to enable them to access the hiring process. If you need an accommodation to access the job application or interview process, please contact candidateaccommodations@toasttab.com.

---—

For roles in the United States, it is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Read the full description
Security Director, Security Assurance and Compliance at Toast

Leads security assurance, compliance engineering, risk governance, continuous controls monitoring, and security compliance team development.

Exec Posted 22 days ago RemoteFirstJobs Product
What this role involves

Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.

Most compliance organizations prove their controls by assembling evidence by hand, once per framework, every year. We are an organization of the future: common controls tested once in code, monitored continuously, and reused across frameworks (including PCI, SOC, SOX, and ISO). You will lead that build for a payments and lending platform where regulatory frameworks have real teeth.

This role represents a strategic shift toward engineered, proactive compliance where trust is continuously measured rather than only periodically asserted in documents. Operating as an independent second line of defense, you will balance rigorous assurance with engineering pragmatism, maintaining the autonomy to assess internal teams while helping them scale through automation.

The position spans both internal transformation and external accountability. Internally, you will drive continuous controls monitoring and risk governance; externally, you will own the evidence base that powers our customer trust surface and sales enablement efforts.

A day in the life (Responsibilities)

  • Drive Engineered Compliance: Build and own continuous controls monitoring, automated evidence collection, and compliance-as-code initiatives so controls are tested once and reused seamlessly across multiple frameworks and certifications.
  • Lead Enterprise Risk & Continuity Governance: Manage overall organizational security risk, third-party and vendor risk, alongside business continuity and disaster recovery governance.
  • Own the Assurance Evidence Base: Maintain and safeguard the independent evidence base underlying our Trust Center and customer security reviews, ensuring absolute integrity while partnering with Customer Trust teams on delivery.
  • Serve as Second Line of Defense: Act as an independent reviewer with the standing and authority to challenge engineering and operational teams, ensuring objective assessment across all security domains.
  • Evolve Team Capabilities: Mentor and upskill the security compliance organization, driving a successful cultural and technical transition from manual auditing to automated compliance engineering.

What you’ll need to thrive (Requirements)

  • Proven Transformation Leadership: Experience leading a security assurance or risk transformation program rather than solely maintaining a steady-state compliance function.
  • Deep Framework Expertise: Strong technical command of major regulatory and security frameworks including PCI, SOC, SOX, and ISO.
  • Hands-on Automation Track Record: Demonstrated success implementing automated controls and continuous evidence collection while upskilling existing team members through the shift.
  • Technical & Pragmatic Mindset: Ability to balance regulatory rigor with engineering constraints, holding your own in deep technical conversations with engineers.
  • People Management Experience: Proven track record leading a team of security, risk, or compliance professionals.

What will help you stand out (Nonessential Skills/Nice to Haves)

  • Background in payments, fintech, or another highly regulated platform business.
  • Direct experience operating within a two-lines-of-defense governance structure.
  • Experience scaling automated compliance architecture within fast-growing cloud environments.

AI at Toast

At Toast, one of our company values is that we’re hungry to build and learn. We believe learning new AI tools empowers us to build for our customers faster, more independently, and with higher quality. We provide these tools across all disciplines, from Engineering and Product to Sales and Support, and are inspired by how our Toasters are already driving real value with them. The people who thrive here are those who embrace changes that let us build more for our customers; it’s a core part of our culture.

Our Total Rewards Philosophy

We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/toast-benefits.

The base salary range for this role is listed below. The starting salary will be determined based on skills, experience, and geographic location. In addition to base salary, our total rewards components include cash compensation (overtime, bonus/commissions if eligible), equity, and benefits. You can learn more about how we align pay with local labor markets in our Geographic Pay Zone Philosophy.

Zone A

$204,000—$326,000 USD

Zone B

$177,000—$283,000 USD

Zone C

$159,000—$254,000 USD

How Toast Uses AI in its Hiring Process

Throughout the hiring process, our goal is to get to know you. We use AI tools to support our recruiters and interviewers with tasks like note-taking, summarization, and documentation of interviews to ensure they can be fully focused on your conversation. All hiring decisions are made by people. We ask that you complete interviews and assessments on your own, without real-time AI tools, recording, or transcription bots, unless we tell you otherwise in advance. To learn more: https://careers.toasttab.com/ai-in-hiring

Our Approach to Hybrid Working

We embrace a hybrid work model that fosters in-person collaboration while valuing individual needs. Our goal is to build a strong culture of connection as we work together to empower the hospitality community, regardless of location. Please visit the Locations page on our career site to learn more about our in-office expectations by region: https://careers.toasttab.com/locations-toast

People Are the Secret Ingredient in Our Recipe for Success

At Toast, our employees are our secret ingredient—when they thrive, we thrive. The restaurant industry brings together people with a wide range of backgrounds, experiences, and perspectives, and we value that same breadth at Toast. We strive to build a culture grounded in authenticity, respect, and humility, where every Toaster has a real opportunity to grow, contribute, and do their best work—raising the bar in delivering exceptional experiences for our customers and each other.

Apply today!

Toast is committed to creating an accessible and inclusive hiring process. As part of this commitment, we strive to provide reasonable accommodations for persons with disabilities to enable them to access the hiring process. If you need an accommodation to access the job application or interview process, please contact candidateaccommodations@toasttab.com.

---—

For roles in the United States, it is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Read the full description