Director, Information Security & Security Strategy

Etsy, Inc.; New York (NY); Hybrid; USD 230,000 - 320,000; Full time

Benefits offered by this job

Equity package

Annual bonus

Comprehensive benefits

Job summary

Etsy, Inc. is hiring a Director of Security to protect our marketplace, products, data, and enterprise technology.

This leader will set the security strategy, guide investment decisions, and help teams build and operate secure services. The role oversees application and product security; cloud and infrastructure security; identity, endpoint, and corporate platform security; security operations and incident response; and security governance, risk, and compliance.

Qualifications

• 10+ years of information security experience including 6+ years in security leadership roles.
• Experience leading security operations and significant incident response efforts, including preparedness, exercises, executive communications, remediation, and lessons learned.
• Experience evaluating or securing AI-enabled systems, agentic workflows, or automated security operations.

Responsibilities

• Set the security strategy and roadmap for the organization.
• Manage organizational design, staffing, budgets, tools, and service providers with priorities based on risk.
• Develop security engineers, analysts, architects, and managers and guide professional growth.
• Oversee vulnerability management, incident response, and security testing across cloud and on-premises environments.
• Report metrics on security coverage, remediation progress, and investment decisions to executives.

Skills

Security leadership

Cloud security

Application security

Threat intelligence

Incident response

AI security

Security governance

Communication with execs

Leadership development

Tools

GCP

Job description

Etsy, Inc. is hiring a Director of Security to protect our marketplace, products, data, and enterprise technology.

This leader will set the security strategy, guide investment decisions, and help teams build and operate secure services. The role oversees application and product security; cloud and infrastructure security; identity, endpoint, and corporate platform security; security operations and incident response; and security governance, risk, and compliance.