Director, Corporate Security

Responsibilities

• Own corporate security strategy and execution across identity and access management, endpoint and device trust, internal SaaS security, data-sharing controls, workforce risk, and incident response for corporate assets.
• Build and maintain a multi-year corporate security roadmap, prioritized by risk, business context, and resource constraints. Present progress and risk posture clearly to the Executive Team.
• Lead security operations across existing tooling including EDR/MDR, email security, SIEM/monitoring tools. Own response coordination, remediation tracking, and escalation.
• Partner with IT to strengthen provisioning and deprovisioning, access reviews, device management, and internal network and application security controls.
• Establish practical guardrails for internal enterprise AI use including approved-tool standards, SSO and domain capture, RBAC, retention, redaction, logging, and usage expectations.
• Partner with Product Security, Compliance, Procurement, and Legal on vendor security reviews, risk assessments, privacy and security questionnaires, and security requirements for strategic software and AI vendors.
• Build and lead a high-performing corporate security team. Hire, develop people, set clear expectations, and hold the team to a high standard of execution and accountability.
• Represent corporate security in audits, investor diligence, customer security reviews, and regulator inquiries as needed.

Requirements

• 7+ years of experience operating at the Director level or equivalent in corporate security, IT security, or security operations with demonstrated accountability for program ownership, team leadership, and executive stakeholder management.
• Experience across both mature, compliance-minded environments (public company, regulated industry, or enterprise scale) and high-growth startups.
• 5+ years of experience leading, managing, or developing high-performing teams.
• Proven track record building or significantly maturing a corporate security program at a startup or scale-up.
• Deep fluency in corporate security fundamentals: identity and access management, endpoint security, device trust, internal network security, SaaS security posture, incident response, and access governance.
• Hands-on experience with enterprise security tooling: SIEM tools, modern EDR/MDR, modern email security, IAM platforms, and device management.
• Experience running a security program subject to external audits, SOC 2, or similar compliance frameworks.
• Strong cross-functional leadership across IT, Engineering, Compliance, Legal, Procurement, People, and business teams.
• Clear, confident communicator at the executive level, able to translate technical risk into business language.
• Experience in healthcare, life sciences, or other sensitive-data environments handling PHI, PII, or proprietary clinical/commercial data.
• Experience supporting audits, internal investigations, vendor reviews, security questionnaires, and environments that handle sensitive data.
• Strong judgment, leadership presence, and execution discipline.

Nice-to-Haves

• Experience scaling a security program through a Series C–E or pre-IPO stage, with direct exposure to investor diligence, SOC 2 Type II, or early public-company readiness.
• Familiarity with Apple device management and mixed-device enterprise environments.

Compensation

Total compensation range: $206,000 - $290,000.