Chief Security & Compliance for Real-Time Data

Aerospike; Mountain View (CA); Hybrid; USD 300,000 - 350,000; Full time

Job summary

Aerospike is seeking a Head of Security & Compliance to mature and scale our security program across corporate, product, and compliance domains. You will lead a team of security and compliance professionals, own incident response, vulnerability management, and the secure development lifecycle for our real‑time database platforms.

This Bay Area–based role requires strategic thinking and hands‑on execution, with the office three days per week (Tue–Thu).

Qualifications

• 10–12 years in security roles, with 3–5 years managing a team.
• Deep understanding of cloud security architecture and AI-specific security risk.
• Working fluency in compliance frameworks, particularly SOC 2 Type II, to lead a direct report.
• Experience presenting security posture and risk to a board or executive audience.
• Track record of partnering with engineering and GTM teams as an enabler.
• Experience at a B2B infrastructure or database company preferred.

Responsibilities

• Own corporate security including endpoint, identity, and network security across a ~300-person, largely remote and hybrid organization.
• Manage core security tooling, including SIEM, EDR, and identity and access management, and the vendor relationships behind them.
• Run employee security awareness training and phishing simulation programs.
• Identify and assess security risks within the organization and implement measures to mitigate risks.
• Own incident response planning and execution for corporate systems, including business continuity and disaster recovery.
• Define security policies, standards, and procedures aligned with business objectives and industry best practices.
• Partner with engineering to keep security integrated into shipping products.
• Own the secure development lifecycle for Aerospike’s database and cloud products.
• Manage third‑party penetration testing and the vulnerability disclosure program.
• Own vulnerability management and patching SLAs across the product line, including AI workloads.
• Own SOC 2 Type II and lead the path toward ISO 27001 as the sales pipeline requires it.
• Respond to customer security questionnaires and support technical due diligence during enterprise procurement.
• Conduct regular security assessments and internal/external audits to ensure compliance and effectiveness.
• Own customer‑facing incident communication and disclosure when a security event triggers contractual obligations.
• Maintain the security portion of vendor risk assessments and data processing agreements.
• Serve as the primary point of contact for customer security teams during the sales cycle.
• Manage a team of security and compliance professionals, with a hiring plan tied to company growth.
• Own a security risk register and risk appetite framework, and report posture, incident trends, and compliance status to executive leadership and the board.
• Serve as the primary technical voice on security for executives and customers during procurement.

Skills

Security leadership

Corporate security

Product security

Compliance frameworks

SOC 2 Type II

ISO 27001 readiness

Incident response

Vulnerability management

Vendor risk management

Board/exec communication

Tools

SIEM

EDR

Identity and access management

Job description

Aerospike is seeking a Head of Security & Compliance to mature and scale our security program across corporate, product, and compliance domains. You will lead a team of security and compliance professionals, own incident response, vulnerability management, and the secure development lifecycle for our real‑time database platforms.

This Bay Area–based role requires strategic thinking and hands‑on execution, with the office three days per week (Tue–Thu).