Founding Information Security Lead - Remote, Unlimited PTO

Flodesk; Austria; Remote; EUR 109,000 - 199,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Unlimited time off

401k match

Learning & development stipend

Job summary

Flodesk, a remote-first company with global hubs, seeks a seasoned information security leader to own and evolve its security program end-to-end. You will drive SOC 2, ISO 27001 and CCPA readiness, partner with engineering on secure development, and shape long-term security governance while ensuring day-to-day IT and vendor operations stay secure.

You will collaborate across product, engineering, and operations to embed security into architecture, tooling, and policies, while communicating

Qualifications

• 10+ years in information security, with a track record of building or maturing security programs.
• 3+ years in an information security leadership role.
• Strong foundation in cloud security, identity governance, vulnerability management, and incident response.
• Proven experience aligning security and privacy practices with GDPR.
• Comfortable partnering directly with engineering on product security and secure development practices.

Responsibilities

• Own Flodesk's security program: policies, controls, governance, and long-term maturity planning.
• Collaborate cross-functionally to build security into product, operational, and technology decisions.
• Maintain and update privacy-related security practices across data handling, retention, and customer commitments.
• Lead SOC 2, ISO 27001 and CCPA readiness, including audits, evidence collection, and continuous compliance.
• Partner with engineering to integrate security into architecture, development workflows, and release processes.
• Evaluate, implement, and maintain security tooling and automation to scale the program.
• Own Security Incident Management end to end: process, technical capability, and cross-company engagement.
• Track and report on security posture, program maturity, and compliance status.

Skills

Information security

Leadership

Cloud security

Identity governance

Vulnerability management

Incident response

GDPR compliance

Security collaboration

Communication

Startup mindset

Travel willingness

Job description

Flodesk, a remote-first company with global hubs, seeks a seasoned information security leader to own and evolve its security program end-to-end. You will drive SOC 2, ISO 27001 and CCPA readiness, partner with engineering on secure development, and shape long-term security governance while ensuring day-to-day IT and vendor operations stay secure.

You will collaborate across product, engineering, and operations to embed security into architecture, tooling, and policies, while communicating