Remote VP of Security & Strategy | AI Governance

Stord; Northern (KY); Hybrid; USD 200,000 - 350,000; Full time

Job summary

Stord is seeking a seasoned VP of Security to define and drive the company’s security strategy and multi-year roadmaps, aligning with NIST CSF 2.0 and certifications. You will stand up 24/7 detection and response, lead security engineering across SIEM/SOAR, EDR/XDR, API security, and secrets management, and own security diligence for mergers and acquisitions while partnering with Product and Engineering.

You’ll also spearhead executive risk discussions, build governance across cloud and on-prem

Qualifications

• 12+ years in security, including leadership at a SaaS/platform
• 5+ years leading a security function
• Cloud-native security at scale (AWS/GCP, Kubernetes, microservices, CI/CD, API security)
• Hands-on M&A security diligence & integration
• Track record building a program to NIST CSF, SOC 2, ISO 27001
• Experience with 24/7 detection and response (in-house, MDR, or hybrid)
• Executive/Board communication on risk and controls
• Judgment on risk vs. spend for controls

Responsibilities

• Set security strategy and multi-year roadmap per NIST CSF 2.0
• Lead 24/7 detection and response program and evolve in-house capabilities
• Own security engineering stack including SIEM/SOAR, EDR/XDR, Cloud posture, API security, secrets management
• Oversee M&A security diligence and integration with target environments
• Partner with Product/Engineering for secure-by-default design across logistics and commerce
• Lead resilience through business continuity and disaster recovery planning
• Grow and mentor a security team spanning multiple disciplines

Skills

Security leadership

Security strategy

Cloud-native security

M&A security diligence

NIST CSF/SOC 2/ISO 27001

24/7 detection & response

Executive/Board communication

Budget/prioritization

Tools

SIEM/XDR/EDR

Cloud security tooling

SAST/DAST

Job description

Stord is seeking a seasoned VP of Security to define and drive the company’s security strategy and multi-year roadmaps, aligning with NIST CSF 2.0 and certifications. You will stand up 24/7 detection and response, lead security engineering across SIEM/SOAR, EDR/XDR, API security, and secrets management, and own security diligence for mergers and acquisitions while partnering with Product and Engineering.

You’ll also spearhead executive risk discussions, build governance across cloud and on-prem