Founding InfoSec Lead — Build Security at Scale

Flodesk; United States; Remote; USD 120,000 - 220,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Unlimited time off

401k match

Learning stipend

Job summary

Flodesk is a remote-first email marketing company seeking a seasoned information security leader to own our security program end to end. You will drive SOC 2, ISO 27001 and CCPA readiness, embedding security into engineering and product decisions, and ensuring day-to-day IT and vendor operations stay secure.

You will collaborate with engineering, privacy, and operations teams to mature security governance, implement controls, and maintain ongoing compliance, while guiding strategic direction for

Qualifications

• 10+ years in information security and building security programs.
• 3+ years in information security leadership.
• Strong foundation in cloud security, identity governance, vulnerability management, and incident response.
• Proven experience aligning security and privacy with GDPR.
• Comfortable partnering with engineering on product security.

Responsibilities

• Own Flodesk's security program: policies, controls, governance, and long-term maturity planning.
• Collaborate cross-functionally to build security into product, operational, and technology decisions.
• Maintain privacy-related security practices across data handling, retention, and customer commitments.
• Lead SOC 2, ISO 27001 and CCPA readiness, including audits and evidence collection.
• Partner with engineering to integrate security into architecture, development workflows, and release processes.
• Evaluate, implement, and maintain security tooling and automation.
• Own Security Incident Management end to end: process and cross-company engagement.
• Design, implement, and improve controls; track security posture and compliance.

Skills

Information security

Security leadership

Cloud security

Incident response

Security governance

GDPR compliance

Cross-functional collaboration

Communication

Travel willingness

SaaS security

Job description

Flodesk is a remote-first email marketing company seeking a seasoned information security leader to own our security program end to end. You will drive SOC 2, ISO 27001 and CCPA readiness, embedding security into engineering and product decisions, and ensuring day-to-day IT and vendor operations stay secure.

You will collaborate with engineering, privacy, and operations teams to mature security governance, implement controls, and maintain ongoing compliance, while guiding strategic direction for