Director, Information Security

Etsy; New York (NY); Hybrid; USD 252,000 - 378,000; Full time

Benefits offered by this job

Equity package

Annual performance bonus

Competitive benefits

Job summary

Etsy seeks a Director of Security to lead the security program across the marketplace, products, data, and enterprise technology. You will set strategy, guide investments, and ensure secure services, reporting to the VP of Engineering, CISO.

You will mentor teams, drive governance and risk, and partner with executives to communicate security implications and drive durable risk posture.

Qualifications

• 10+ years in information security with 6+ years in security leadership.
• Strong technical depth across software engineering, cloud security, and risk.
• Experience leading security operations, incident response, and governance.

Responsibilities

• Set security strategy and roadmap; manage org design, staffing, budgets, tools, and providers.
• Develop security engineers, analysts, and managers; define roles and growth paths.
• Oversee vulnerability management, threat intel, and incident response with tested plans.
• Integrate security into product development and enterprise tech; lead risk assessments and audits.
• Report metrics on coverage, remediation, and investment decisions to executives.

Skills

Security leadership

Security strategy

Threat modeling

Incident response

Cloud security

IAM / identity management

Security metrics

Executive communication

Leadership

Job description

Company Description

Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy employee, you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human.

Company Description

Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy employee, you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human. We believe exceptional companies are built by exceptional teams, and we're intentional about it. That means hiring great people, setting them up for success from day one, and giving them real reasons to grow their careers here. We invest in development that goes beyond promotions, and we foster the trust and relationships that help people do their best work together.

What’s the Role?

Etsy is hiring a Director of Security to protect our marketplace, products, data, and enterprise technology. This leader will set the security strategy, guide investment decisions, and help teams build and operate secure services. The role oversees application and product security; cloud and infrastructure security; identity, endpoint, and corporate platform security; security operations and incident response; and security governance, risk, and compliance. This is a full-time position reporting to the VP of Engineering, CISO.

What’s this team like at Etsy?

Etsy’s security teams build tools, operate defenses, advise colleagues, and respond to incidents. They work with engineering and business teams to identify risks and make secure decisions easier. The team tests and measures its work, uses continuous deployment, and learns from incidents through a blameless approach. Leaders support clear ownership, shared learning, and career development.

What does the day-to-day look like?

• Set the security strategy and roadmap. Manage organizational design, staffing, budgets, tools, and service providers, with priorities based on business needs and security risk.
• Develop security engineers, analysts, architects, and managers. Establish clear responsibilities and support professional growth.
• Guide vulnerability management, detection, threat intelligence, and incident response. Maintain tested response plans, coordinate communications, and partner on business continuity and recovery exercises.
• Integrate security into product development and enterprise technology. Partner on architecture reviews, threat modeling, security testing, and controls for cloud services, identity, endpoints, and corporate systems.
• Oversee security policies, risk assessments, audit readiness, and supplier security. Report metrics that show security coverage, remediation progress, and incident trends, and explain risks and investment decisions to executives and business partners.

The Director will also guide employee security education and assess emerging threats and technologies, including AI-enabled systems and security automation.

Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy's discretion, or otherwise applicable with local law.

Qualities that will help you thrive in this role are:

• 10+ years of experience in information security including 6+ years in security leadership roles.
• An experienced security leader who combines technical depth, operational judgment, and strong organizational leadership. You are comfortable setting direction, engaging deeply in technical decisions, and helping teams execute through ambiguity.
• A track record of running or scaling a sizeable security organization that includes software engineering, security operations, architecture, or risk and compliance capabilities.
• A strong technical foundation in software engineering, cloud security, infrastructure, application security, identity and access management, or security architecture.
• Experience evaluating or securing AI-enabled systems, agentic workflows, or automated security operations.
• Experience leading security operations and significant incident response efforts, including preparedness, exercises, executive communications, remediation, and lessons learned.
• The ability to define meaningful security metrics and communicate technical risk, tradeoffs, and investment recommendations to executives and nontechnical stakeholders.
• Excellent written and verbal communication skills, sound judgment under pressure, and the ability to influence outcomes without relying on hierarchy.
• An instinct to be collaborative, pragmatic, and customer-minded while maintaining a high bar for security outcomes.
• A leadership style that develops people, creates clarity, empowers teams, and holds leaders accountable for results.

Nice to have

• Experience securing a large-scale consumer marketplace, online service, or similarly complex technology environment.
• Experience with GCP and modern cloud-native security architectures.

Compensation & Benefits

In addition to salary, you'll be eligible for an equity package, an annual performance bonus, and our competitive benefits that support you and your family. Base salary is determined by your location, skills, and experience. Etsy uses two geographic pay zones to reflect the labor markets where we compete for talent: one called Geo-1, covering the New York City metropolitan area, San Francisco Bay Area, and Seattle metropolitan area, and one called Geo-2, covering all other U.S. locations. Salary ranges for this role vary by zone and are listed below.

Location

We prioritize candidates based within commutable distance of Etsy’s Brooklyn Office. Depending on proximity, we ask team members to come in once or twice per week. Remote candidates outside commutable distance may be considered on a case-by-case basis, with the expectation of occasional travel to the office. Learn more details about our work modes and workplace safety policies here.

Salary Range

• Geo-1: 280,000.00 - 378,000.00 USD Annual
• Geo-2: 252,000.00 - 340,000.00 USD Annual

What's Next

As we hope you've seen already, Etsy is a place that values individuality and variety. We don't want you to be like everyone else -- we want you to be like you! So tell us what you're all about.

Our Promise

At Etsy, we believe that a diverse, equitable, and inclusive workplace furthers relevance, resilience, and longevity. We encourage people from all backgrounds, ages, abilities, and experiences to apply. Etsy is proud to be an equal opportunity workplace and is committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, national origin, religion or creed, sex, pregnancy (including childbirth and related medical conditions), gender, gender identity or expression, sexual orientation, age, citizenship or immigration status, marital or familial status, physical or mental disability, medical condition, genetic information, military or veteran status**, or any other characteristic protected by applicable federal, state, or local law**. If, due to a disability, you need an accommodation during any part of the interview or hiring process, please let your recruiter know and we will work with you to meet your needs. While Etsy supports visa sponsorship, sponsorship opportunities may be limited to certain roles and skills.