Founding Information Security Leader — Build & Scale

Flodesk; Portland (OR); On-site; USD 120,000 - 220,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Unlimited time off

401k match

Learning stipend

Job summary

Flodesk is seeking a seasoned security executive to own the security program end to end. You will establish governance, controls, and long-term strategy, while partnering with engineering to embed security into the product and cloud platforms.

You will lead SOC 2, ISO 27001, and CCPA readiness, and drive continuous compliance across the organization. A remote-first culture supports flexibility, with travel as needed.

Qualifications

• 10+ years in information security, with a track record of building or maturing security programs.
• 3+ years in an information security leadership role.
• Strong foundation in cloud security, identity governance, vulnerability management, and incident response.
• Proven experience aligning security and privacy practices with GDPR.
• Comfortable partnering directly with engineering on product security and secure development practices.
• Clear, confident communicator with technical and non-technical stakeholders alike.
• Startup DNA: a can-do attitude, flexibility, and willingness to occasionally roll up your sleeves.
• Willing to travel on a semiannual basis.

Responsibilities

• Own and drive Flodesk's security program, including policies, controls, governance, and long-term maturity planning.
• Collaborate cross-functionally to embed security into product, operations, and technology decisions.
• Lead audits and maintain evidence collection for SOC 2, ISO 27001, and CCPA readiness.
• Partner with engineering to secure architecture, development workflows, and cloud foundations.
• Design, implement, and continuously improve security controls and tooling.
• Own incident management end-to-end and report on security posture and compliance.
• Manage IT operations lifecycle and vendor security considerations.

Skills

Security leadership

Program governance

Cloud security

Privacy & GDPR

Collaboration with engineering

Clear communication

Startup mindset

Travel willingness

Job description

Flodesk is seeking a seasoned security executive to own the security program end to end. You will establish governance, controls, and long-term strategy, while partnering with engineering to embed security into the product and cloud platforms.

You will lead SOC 2, ISO 27001, and CCPA readiness, and drive continuous compliance across the organization. A remote-first culture supports flexibility, with travel as needed.