Senior VP, Security Strategy & Incident Response

Archer; United States; On-site; USD 250,000 - 360,000; Full time

Job summary

Archer, in partnership with Stord, is seeking a senior security leader to define and drive the company’s security strategy. You will own the multi-year roadmap, governance, and compliance across NIST CSF, SOC 2, ISO 27001, and AI governance initiatives.

You will stand up 24/7 detection and response, build a scalable security stack, and guide security diligence for M&A. You’ll lead a growing team and partner with Product and Engineering to embed secure-by-default practices across the business.

Qualifications

• 12+ years in security, including 5+ leading a security function at a SaaS or platform company.
• Depth in cloud-native security at scale — AWS/GCP, Kubernetes, microservices, CI/CD, API security.
• Hands-on experience owning M&A security diligence and integration.
• Track record building a security program against NIST CSF, SOC 2, and ISO 27001 — and passing the audits.
• Experience standing up or running 24/7 detection and response, whether in-house, through MDR, or a hybrid.
• Executive and Board communication chops. You can explain residual risk to a board, a trade-off to a CFO, and a control to an engineer, and be understood by all three.
• Judgment about where to spend. You know which risks justify a control, which justify a conversation, and which justify neither.

Responsibilities

• Set the security strategy and the multi-year roadmap.
• Run our program against NIST CSF 2.0 and expand audit scopes and certifications.
• Establish AI governance across our models, agents, and Stord Labs work.
• Stand up 24/7 detection and response, initially through an MDR partnership, and progressively bring detection engineering in-house.
• Own incident response end to end — playbooks, on-call, tabletop exercises with the executive team, and the postmortems that actually change something.
• Build and operate the technical stack: SIEM/SOAR, EDR/XDR, cloud security posture management, API security, secrets management, and vulnerability management.
• Harden CI/CD across a 200+ person engineering organization — signed commits, SBOM generation, dependency and secrets scanning, SAST/DAST in the pipeline.
• Stord acquires companies, and every deal brings inherited systems, credentials, and technical debt. You'll own security diligence on future targets and the integration playbook that gets acquired environments to our standard on a predictable timeline.
• Partner with Product and Engineering on secure-by-default design across Logistics, Brands, and Commerce. Own penetration testing and our bug bounty program. Be the executive voice in enterprise security reviews and questionnaires — the ones that decide whether a deal closes this quarter or next.
• Own business continuity and disaster recovery for an operation where downtime means orders don't ship. Prove recovery works by testing it, not by documenting it.
• Lead and grow a team spanning GRC, security operations, security engineering, application security, and cloud/infrastructure security, plus an MDR partner. You'll inherit the existing team, then define and hire the rest of the structure yourself.

Skills

Security leadership

Cloud security

M&A security

Audit readiness

Executive comms

Risk assessment

Tools

AWS

GCP

Kubernetes

CI/CD security

Job description

Archer, in partnership with Stord, is seeking a senior security leader to define and drive the company’s security strategy. You will own the multi-year roadmap, governance, and compliance across NIST CSF, SOC 2, ISO 27001, and AI governance initiatives.

You will stand up 24/7 detection and response, build a scalable security stack, and guide security diligence for M&A. You’ll lead a growing team and partner with Product and Engineering to embed secure-by-default practices across the business.