Enterprise Security Director — ISO 27001 Focus

Apptronik; Austin (TX); On-site; USD 180,000 - 280,000; Full time

Job summary

Apptronik is seeking a Director of Enterprise Security to build and lead the information security program. You will own risk management, governance, and the ISMS to drive ISO 27001 certification while partnering with IT, legal, HR, finance, and operations.

You will architect enterprise security across cloud, SaaS, and endpoints, lead incident response, and ensure compliance with NIST, CIS, GDPR/CCPA in a growing robotics company.

Qualifications

• 12+ years of information security experience with leadership roles.
• Strong ISO 27001 implementation and ongoing ISMS management experience.
• Experience scaling security at high-growth hardware/robotics/manufacturing companies is a plus.

Responsibilities

• Define and own enterprise information security strategy, roadmap, and policies with executive reporting.
• Design and operate an ISO 27001 ISMS and drive certification readiness.
• Build security governance, risk management, and vendor security review processes.
• Operate SOC 2 program in parallel with ISO 27001 and coordinate with auditors.
• Lead threat detection, response capabilities, and incident playbooks.

Skills

ISO 27001

ISMS lifecycle

Risk management

SOC 2

Cloud security

IAM

Incident response

Security governance

Executive briefing

Vulnerability management

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field

Master's degree (MS in Information Security, MBA with security focus) is a plus

Active senior security certifications (CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, GIAC) strongly preferred

Job description

Apptronik is seeking a Director of Enterprise Security to build and lead the information security program. You will own risk management, governance, and the ISMS to drive ISO 27001 certification while partnering with IT, legal, HR, finance, and operations.

You will architect enterprise security across cloud, SaaS, and endpoints, lead incident response, and ensure compliance with NIST, CIS, GDPR/CCPA in a growing robotics company.