Remote-First Security & Compliance Lead

Flodesk; Los Angeles (CA); On-site; USD 120,000 - 220,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Unlimited time off

401k match

Learning stipend

Job summary

Flodesk is seeking an experienced information security leader to own the security program end to end, building governance, policies, and controls while driving audits and continuous compliance across SOC 2, ISO 27001 and CCPA.

Reporting to the COO/CPO, this hands-on role collaborates with engineering on secure development and cloud security, while shaping the strategic direction and external representation of Flodesk's security posture.

Qualifications

• 10+ years in information security, with a track record of building or maturing security programs.
• 3+ years in an information security leadership role.
• Strong foundation in cloud security, identity governance, vulnerability management, and incident response.
• Proven experience aligning security and privacy practices with GDPR.

Responsibilities

• Own Flodesk's security program: policies, controls, governance, and long‑term maturity planning.
• Collaborate cross‑functionally to build security into product, operational, and technology decisions.
• Maintain and update privacy‑related security practices across data handling, retention, and customer commitments.
• Lead SOC 2, ISO 27001 and CCPA readiness, including audits, evidence collection, and continuous compliance.
• Partner with engineering to integrate security into architecture, development workflows, and release processes.
• Evaluate, implement, and maintain security tooling and automation to scale the program.
• Own Security Incident Management end to end: process, technical capability, and cross‑company engagement.

Skills

Security leadership

Cloud security

Incident response

Vulnerability management

GDPR alignment

Tools

SSO

2FA

Job description

Flodesk is seeking an experienced information security leader to own the security program end to end, building governance, policies, and controls while driving audits and continuous compliance across SOC 2, ISO 27001 and CCPA.

Reporting to the COO/CPO, this hands-on role collaborates with engineering on secure development and cloud security, while shaping the strategic direction and external representation of Flodesk's security posture.