Chief Information Security & GRC Leader — SaaS, Remote

BigCommerce Pty.; Austin, Northern (TX, KY); Hybrid; USD 240,000 - 305,000; Full time

Job summary

Commerce, the parent company of BigCommerce, Feedonomics and Makeswift, is seeking a VP, Chief Information Security Officer to lead its information security, compliance, and cyber risk program across SaaS platforms and corporate systems.

You will oversee a multi-location team, translate threats into actionable plans, ensure regulatory alignment, and drive a scalable security strategy in a complex, cloud-based environment.

Qualifications

• Proven background leading information security within SaaS or platform oriented global companies.
• Strong understanding of security in cloud-based microservices environments.
• Experience with regulatory frameworks and governance across multiple regions.

Responsibilities

• Define and lead cybersecurity and GRC strategy with policies and programs.
• Oversee security investigations, incident response, and post-incident actions.
• Design security systems, IAM policies, and GRC procedures for a scalable SaaS environment.
• Maintain awareness of cyber threat landscape affecting SaaS and cloud.
• Translate regulatory and customer requirements into actionable plans.
• Ensure compliance with laws, regulations, and industry frameworks.
• Oversee audits, assessments, certifications, and assurance activities.
• Lead identity and access management, third-party risk, vulnerability management.
• Communicate security policies clearly and enforce compliance.
• Manage teams and vendors, including hiring and development.
• Update strategy to reflect new tech, threats, and business priorities.
• Brief executive team and board on security posture and investments.
• Share security best practices across the company.

Skills

SaaS security

GRC & compliance

Cloud security

DevOps familiarity

Executive communication

Board interaction

Job description

Commerce, the parent company of BigCommerce, Feedonomics and Makeswift, is seeking a VP, Chief Information Security Officer to lead its information security, compliance, and cyber risk program across SaaS platforms and corporate systems.

You will oversee a multi-location team, translate threats into actionable plans, ensure regulatory alignment, and drive a scalable security strategy in a complex, cloud-based environment.