Security Lead – Team Platform

• Set the security architecture roadmap: threat model, control framework, key projects (data classification, secrets mgmt, IAM hardening, supply chain).
• Drive residual risk down - own the list, sequence the work, report to leadership monthly.
• Manage security engineers, GRC and IT (1:1s, growth, performance), heavy technical leadership.
• Be the security partner for Eng/Product on new initiatives (AI tooling, Enterprise features).
• Co-own audit readiness with GRC: SOC 2, ISO 27001, customer security reviews.
• Stay hands-on: ship automation and services, harden cloud + code, catch threats early.

Requirements

• 5+ yrs in product / application / cloud security at a SaaS company.
• Experience prepping for SOC 2 Type II + ISO 27001.
• Has managed or tech‑led 2–4 engineers before (formally or as tech lead with people responsibilities).
• Strong on AWS, IAM, K8s, secrets, vuln mgmt, threat modeling, DevSecOps in CI/CD.
• Exposed to Backend / SRE (Python, Bash, Terraform).
• Track record of measurably reducing org-wide risk (not just running programs).
• Influences without authority; can pull Eng/Product toward the right call.
• Deep IC experience - e.g has set the security direction for a meaningful org.

Core Competencies

Demonstrates extensive experience in product, application, and cloud security within a SaaS environment, with a strong focus on risk management, security architecture, and compliance with SOC 2 and ISO 27001 standards. Proven ability to lead technical teams, influence cross-functional stakeholders, and implement security initiatives that measurably reduce organizational risk.