SaaS CISO & GRC Strategy Leader

Commerce; Austin, Northern (TX, KY); Hybrid; USD 240,000 - 305,000; Full time

Job summary

Commerce is seeking a VP, Chief Information Security Officer to lead the company’s information security, governance, risk, and compliance program across our SaaS platform and corporate systems. You will guide a distributed team and collaborate with executives to align security with business goals.

The role requires strong experience in cloud-based, microservices environments, and proven ability to communicate with partners, customers, and the board.

Qualifications

• Extensive information security leadership in SaaS/platform environments.
• Experience with governance, risk and compliance across multiple regions.
• Strong familiarity with SOX, PCI, GDPR, CCPA, SOC 2, ISO 27001.
• Cloud, microservices, and DevOps practices in AWS/GCP.

Responsibilities

• Define and lead Commerce’s cybersecurity and GRC strategy across SaaS platforms.
• Oversee security investigations, incident response, and post-incident actions.
• Design security systems, IAM policies, and GRC procedures for scalability.
• Stay current with cyber threat landscape affecting cloud and ecommerce domains.
• Translate regulatory and customer requirements into actionable security plans.
• Ensure compliance with laws, regulations, and industry frameworks.
• Oversee security audits, assessments, and customer assurance activities.
• Lead IAM, third-party risk, vulnerability management, and security training.

Job description

Commerce is seeking a VP, Chief Information Security Officer to lead the company’s information security, governance, risk, and compliance program across our SaaS platform and corporate systems. You will guide a distributed team and collaborate with executives to align security with business goals.

The role requires strong experience in cloud-based, microservices environments, and proven ability to communicate with partners, customers, and the board.