Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Lead the development and execution of information security strategies, governance, and risk management initiatives.
Coordinate incident response, third-party security assessments, and customer security requirements.
Promote security awareness and monitor performance metrics to strengthen organizational resilience.
The company operates in a dynamic technology environment where security and innovation drive business growth. It values proactive leadership, collaboration, and continuous improvement across its teams.
Lead Carrot's security strategy and roadmap, aligning corporate and product security with business priorities.
Own GRC, incident response, cloud and application security, and compliance certifications including SOC 2 and HITRUST.
Represent security posture to enterprise customers and partner with Engineering to embed secure practices across the platform.
Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.
Take ownership of daily security operations and compliance activities across a payment gateway and PCI DSS 4.0.1 environment.
Monitor security events, manage identities and access, investigate incidents, and ensure recurring PCI DSS and SOC 2 controls are documented.
Collaborate with engineering, infrastructure, network, and compliance teams to strengthen security controls and improve threat detection.
The company provides payment gateway and switching services, ensuring the security of sensitive payment data. It operates as a fully remote security team focused on compliance, continuous improvement, and safeguarding financial technology services.
Monitor and triage security alerts, coordinate incident response, and run tabletop exercises.
Maintain technical security controls including encryption, key/certificate management, and secrets rotation.
Support SOC 2 and GDPR compliance through vendor reviews, client questionnaires, and evidence collection.
Graphite is a technology-enabled growth agency that helps fast-growing companies like Masterclass, Notion, and BetterUp unlock sustainable revenue through content, SEO, and AEO. We are a fully distributed team across North America, Latin America, and Europe, obsessed with impact and delivering outcomes for clients.
Lead the development and execution of ATPCO's information security vision and strategy.
Oversee high-impact security projects, ensuring alignment with operational needs and long-term business goals.
Manage security operations, compliance, metrics, budgeting, and a security-first culture across the organization.
ATPCO is the world's primary source for air fare content, holding over 200 million fares across 160 countries. The company has a remote-first culture rooted in trust, transparency, and belonging, with a focus on flexibility, collaboration, and employee wellbeing.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Own and lead the company's global information security strategy, organization, and execution.
Protect technology, infrastructure, products, corporate environment, and data across the business.
Build a security organization and culture that enables rapid, safe business growth.
Job&Talent is an AI-powered workforce management platform for frontline industries. Headquartered in Madrid, it operates in 10 countries, backed by leading investors, with an inclusive culture.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
Lead OT incident response engagements for industrial customers, including investigations, threat hunts, and compromise assessments.
Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing response communications.
Deliver advisory services like IR planning workshops and maturity assessments, while mentoring teammates and improving methodologies.
Dragos is a global leader in OT cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC.
Drive implementation and continuous improvement of ISO 27001 ISMS and SOC 2 Type II compliance.
Own risk management, internal audits, security policies, and vendor security assessments.
Collaborate with engineering and DevOps on AWS security governance, incident response, and AI/LLM risk governance.
Insider One is an AI-powered marketing and customer engagement platform that unifies data, personalization, and journey orchestration across channels. With 1,500+ employees from 50+ nationalities and offices in over 30 countries, it is a diverse, socially progressive B2B SaaS unicorn backed by major investors.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.
Develop and implement enterprise security strategy, governance, and risk management across the organization.
Lead HIPAA compliance, AI security, and security operations, including incident response and customer trust.
Build a high-performing security team, embedding security-by-design across products, cloud, and infrastructure.
Insurity provides configurable, cloud-native insurance software that helps organizations capitalize on new opportunities. As the largest cloud-based software provider for the P&C market, it is trusted by 22 of the top 25 carriers and values innovation, teamwork, and continuous learning.
Implement and configure security applications and infrastructure to support corporate policies and federal and state regulations.
Serve as an information security subject matter expert, including familiarity with cloud implementations.
Lead infrastructure security assessments and incident response efforts across networking, servers, databases, and applications.
KnitWell Group is a specialty retail operating company comprising iconic American brands such as Ann Taylor, Chico's, LOFT, and Talbots. Our associates are innovators who thrive through collaboration and are dedicated to excellence, creating fashion that makes customers feel good.
You will conduct security control testing and evaluations across SOC 2, ISO 27001, and PCI DSS frameworks.
You will coordinate evidence collection and technical walkthroughs with Engineering, DevOps, IT, and system owners.
You will identify control gaps, assess risks, and support remediation plans in the GRC platform.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies through objective, skills-based reviews. It operates with a remote-first approach and uses technology to streamline recruitment and improve hiring outcomes.
Design and operate scalable cloud infrastructures and automate deployments across environments.
Integrate security early into development and operations, enforcing standards for infrastructure, access, and data.
Ensure observability, availability, and resilience while collaborating with engineering and product teams.
WongDoody creates human experiences at 24 studios across 4 continents, transforming businesses through strategy, creativity, data, and technology. Backed by Infosys, the team is inclusive, collaborative, and values-driven, with a focus on shaping a better future.
Lead compliance programs including SOC 2, GDPR, CCPA/CPRA, and Shopify partner security requirements.
Own security policies, risk management, business continuity, and incident response.
Manage IT operations, endpoint security, and cloud security across the company.
Rebuy revolutionizes shopping with intelligent, personalized experiences for DTC brands. They are a fully remote team with a culture rooted in ownership, drive, and empathy.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.