Chief Security & Risk Architect

mLabs; New York (NY); Remote; USD 200,000 - 250,000; Full time

Benefits offered by this job

Competitive compensation

Flexible work model with NYC/Berlin</n

Healthcare & wellbeing

Hardware & IT allowance

Professional growth budget

Job summary

MLabs is seeking a Head of Security & Risk to build and own the information security and enterprise risk management functions from the ground up. Reporting to the Deputy COO, you will shape the security posture across engineering, product, legal, and operations to stay audit-ready.

You will drive ERM, compliance, incident response, vendor due diligence, and security awareness, with remote US flexibility and on-site days near New York City as needed.

Qualifications

• 7–10 years of progressive information security, risk management, GRC, or compliance experience.
• Experience building compliance programs from the ground up, including SOC 2 audits and ISO 27001 implementation/maintenance.
• Hands-on work with GRC automation platforms and security integration in DevOps/IaaS.

Responsibilities

• Build and own Enterprise Risk Management from scratch, including risk registers and escalation frameworks.
• Lead Information Security Compliance & Certifications across SOC 2 and ISO 27001.
• Design and maintain ISMS, security policies, incident response, and BCP/DR tabletop exercises.
• Manage partner security due diligence and vendor risk evaluations with legal collaboration.
• Develop and own security awareness training across all departments.

Skills

Proactive Risk Mindset

Process Rigor

High Ownership

Stakeholder Communication

Tools

Vanta

Drata

AWS

Job description

MLabs is seeking a Head of Security & Risk to build and own the information security and enterprise risk management functions from the ground up. Reporting to the Deputy COO, you will shape the security posture across engineering, product, legal, and operations to stay audit-ready.

You will drive ERM, compliance, incident response, vendor due diligence, and security awareness, with remote US flexibility and on-site days near New York City as needed.