Global InfoSec & GRC Leader — Scale Security & Compliance

Stott and May; New York (NY); On-site; USD 250,000 - 350,000; Full time

Benefits offered by this job

Equity

Job summary

Stott and May is recruiting a Head of Information Security / GRC in New York to establish and scale a global IT security governance and compliance capability. You will own security strategy, risk management and regulatory compliance while partnering with Legal, HR, Finance and Customer Success.

This leadership role balances robust controls with speed, driving a secure, scalable technology foundation for an internationally expanding workforce.

Qualifications

• Proven IT leadership in a high-growth SaaS or technology business.
• Deep expertise in identity, endpoints, enterprise systems and cloud platforms.
• Hands-on leadership of SOC 2, ISO 27001, audits and risk programmes.
• Experience in enterprise B2B SaaS, AI or fintech environments.
• Knowledge of GDPR and global privacy requirements, AWS or Azure, zero-trust.
• Strong communication, stakeholder leadership and commercial judgement.
• A pragmatic mindset balancing security, scalability and velocity.

Responsibilities

• Set and deliver the global IT strategy, roadmap, budget and operating model.
• Own identity and access management, endpoint management, hardware, software, onboarding and offboarding.
• Scale secure, reliable systems across regions and offices.
• Lead security governance, risk management, business continuity and vendor assurance.
• Maintain SOC 2 and ISO 27001 compliance.
• Partner with Engineering on vulnerability management, security awareness and incident response.
• Lead enterprise security reviews, due diligence and customer audits.
• Build, mentor and lead a global IT team.
• Drive automation, improve employee experience and reduce risk.

Skills

IT leadership

IAM

SOC 2

ISO27001

GDPR

Zero-trust

AWS/Azure

Stakeholder mgmt

Commercial judgment

Job description

Stott and May is recruiting a Head of Information Security / GRC in New York to establish and scale a global IT security governance and compliance capability. You will own security strategy, risk management and regulatory compliance while partnering with Legal, HR, Finance and Customer Success.

This leadership role balances robust controls with speed, driving a secure, scalable technology foundation for an internationally expanding workforce.