Founding Information Security Leader

Flodesk; Menlo Park (CA); Hybrid; USD 120,000 - 220,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Unlimited time off

401k match

Learning stipend

Job summary

Flodesk is seeking a senior information security leader to own the security program end‑to‑end, driving SOC 2, ISO 27001, and privacy readiness. You will partner with engineering to embed security into product and maintain day‑to‑day IT and vendor operations.

You will develop policies, lead audits, and set strategic direction while aligning security with business goals across a distributed team and a remote‑first culture.

Qualifications

• 10+ years in information security.
• 3+ years in an information security leadership role.
• Strong foundation in cloud security, identity governance, vulnerability management, and incident response.
• Proven experience aligning security and privacy practices with GDPR.
• Comfortable partnering with engineering on product security and secure development practices.

Responsibilities

• Own Flodesk's security program: policies, controls, governance, and long‑term maturity planning.
• Collaborate cross‑functionally to build security into product, operational, and technology decisions.
• Maintain and update privacy‑related security practices across data handling, retention, and customer commitments.
• Lead SOC 2, ISO 27001 and CCPA readiness, including audits, evidence collection, and continuous compliance.
• Partner with engineering to integrate security into architecture, development workflows, and release processes.
• Evaluate, implement, and maintain security tooling and automation.
• Own Security Incident Management end to end: process, technical capability, and cross‑company engagement.
• Design, implement, and continuously improve controls.
• Track and report on security posture, program maturity, and compliance status.
• Defend Flodesk's SaaS platform and its customers by introducing protective mechanisms and security capabilities.
• Own the lifecycle of company hardware from procurement to retirement.
• Be the first point of contact for IT issues: hardware, software, network connectivity.
• Run new‑hire setup and secure access revocation for leavers.
• Manage domain registrations, DNS, and general IT housekeeping.
• Vet new tools before purchase, checking for SSO, 2FA, and integration capabilities.
• Maintain a central registry of approved software so the org stays on authorized tools.

Skills

Security leadership

Cloud security

Incident response

GDPR compliance

Engineering collaboration

Communication

Startup mindset

Travel readiness

SOC 2 knowledge

ISO 27001 knowledge

Job description

Flodesk is seeking a senior information security leader to own the security program end‑to‑end, driving SOC 2, ISO 27001, and privacy readiness. You will partner with engineering to embed security into product and maintain day‑to‑day IT and vendor operations.

You will develop policies, lead audits, and set strategic direction while aligning security with business goals across a distributed team and a remote‑first culture.