Founding Information Security Leader - Build & Own Security Program

Flodesk; Seattle (WA); Remote; USD 120,000 - 220,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Unlimited time off

401k match

Learning stipend

Job summary

Flodesk, a remote-first email marketing company, is seeking a senior information security leader to own the security program end to end, driving SOC 2, ISO 27001, and CCPA readiness, and partnering with engineering on secure development.

You will report to the COO/CPO, write policies, manage audits, oversee incident response, and align security with GDPR while supporting IT and vendor operations across cloud and data architectures.

Qualifications

• 10+ years in information security with a track record of building or maturing security programs.
• 3+ years in an information security leadership role.
• Strong foundation in cloud security, identity governance, vulnerability management, and incident response.
• Proven experience aligning security and privacy practices with GDPR and similar frameworks.

Responsibilities

• Own Flodesk's security program: policies, controls, governance, and long‑term maturity planning.
• Partner with engineering to integrate security into architecture, development workflows, and release processes.
• Lead SOC 2, ISO 27001 and CCPA readiness, including audits, evidence collection, and continuous compliance.
• Own Security Incident Management end to end: process, capability, and cross‑company engagement.
• Handle IT support & operations: hardware lifecycle, accounts, and secure access revocation.
• Vet tools and maintain a central registry of approved software to ensure secure integrations.

Skills

Security leadership

Cloud security

Incident response

GDPR alignment

Security governance

Effective communicator

Startup mindset

Travel willingness

Job description

Flodesk, a remote-first email marketing company, is seeking a senior information security leader to own the security program end to end, driving SOC 2, ISO 27001, and CCPA readiness, and partnering with engineering on secure development.

You will report to the COO/CPO, write policies, manage audits, oversee incident response, and align security with GDPR while supporting IT and vendor operations across cloud and data architectures.