VP of IT and Security

Demandbase; San Francisco (CA); On-site; USD 180,000 - 220,000; Full time

Job summary

A leading technology company located in San Francisco is seeking a Vice President for IT & Security. This executive will manage the global security program and IT transformation initiatives, ensuring that IT infrastructure and security align with corporate goals. The ideal candidate will possess robust leadership in IT and security, with a track record of successful modernization projects and expertise in SaaS and cloud technology. This position offers the opportunity to shape the tech backbone in a dynamic environment.

Qualifications

• 12+ years in IT and Information Security, with 5+ years at the VP/CISO level.
• Proven success in leading large-scale IT modernization projects.
• Strong understanding of public cloud architecture and securing multi-tenant SaaS applications.

Responsibilities

• Design and execute a multi-year IT roadmap.
• Drive the evolution of global office and remote-work infrastructure.
• Lead the IT and Security integration strategy for future acquisitions.

Skills

Leadership Experience

Transformation Track Record

SaaS & Cloud Expertise

Systems Thinking

Talent Builder

Vision + Execution

Strong Communicator

Education

CISSP

CCISO or equivalent

Tools

AWS

GCP

Azure

Job description

Demandbase is the only pipeline AI platform that empowers GTM teams to automate growth at scale. With a unified view of data, insights, actions, and outcomes, B2B enterprises can seamlessly align and execute their account-based GTM strategies with confidence. Thousands of businesses trust Demandbase to maximize revenue, minimize waste, and consolidate their data and tech stacks – all in one platform.

As a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have also continuously been recognized as One of The Best Places To Work in the San Francisco Bay Area by Fortune, and One of The 60 Best Companies To Sell For by Selling Power. Our offices are located in San Francisco, New York, Austin, Seattle, India, and the United Kingdom.

About the Role

Demandbase is seeking a forward-thinking Vice President, IT & Security to join our senior leadership team. Reporting to the CFO, this role serves as the strategic and operational leader of our global security program and IT organization. You will be the architect of Demandbase’s digital backbone, leading a comprehensive IT transformation roadmap that transitions legacy processes into automated, scalable, and cloud-first business operations.

We are looking for an executive who can balance the "Protector" mindset of a CISO with the "Builder" mindset of a modern CIO. You will shape and execute a vision that aligns with our position as a category-defining B2B marketing technology company, ensuring our infrastructure and security posture are competitive advantages rather than administrative hurdles.

Responsibilities

• Modernize the Tech Stack: Design and execute a multi-year IT roadmap focused on sunsetting technical debt and implementing best-in-class, automated SaaS ecosystems.
• Scalable Infrastructure: Drive the evolution of global office and remote-work infrastructure, ensuring a seamless, high-performance experience that scales with headcount growth.
• Operational Excellence: Re-engineer internal IT service delivery (ITSM) using automation and self-service portals to improve employee productivity and reduce friction.
• M&A Integration: Lead the IT and Security integration strategy for future acquisitions, ensuring rapid onboarding and systems consolidation.

AI Productivity & Security Strategy

• AI Adoption: Drive Demandbase’s AI productivity strategy by enabling responsible, high-impact adoption of AI-powered tools across the organization.
• AI/ML Security Readiness: Anticipate and mitigate emerging risks related to LLMs and automation platforms. Establish governance and technical controls to ensure safe AI adoption and compliance with the EU AI Act and NIST AI RMF.

Security Strategy & Execution

• Global Security Vision: Develop and evolve a risk-based information security strategy that protects digital assets, customer data, and IP.
• Cloud & Product Security: Partner with engineering/DevOps to embed security into the SDLC and CI/CD pipelines. Ensure secure-by-design practices for all cloud-native products.
• Governance & Risk: Own the global IT risk management program. Establish and report on controls, policies, and KPIs for executive leadership and the Board.

Business Systems & Data Management

• Cross-Functional Alignment: Act as the primary bridge between Finance, Sales, and Marketing to ensure the enterprise application suite (Salesforce, NetSuite, etc.) is integrated and optimized for business velocity.
• Centralized Data Management: Lead initiatives to ensure secure, compliant, and scalable handling of enterprise data across systems to improve data quality and reduce risk.
• Vendor & Spend Management: Drive strategic vendor relationships and optimize the global IT budget through rigorous SaaS lifecycle management.

Compliance & Privacy

• Global Frameworks: Lead successful execution of SOC 2, ISO 27001, SOX, GDPR, and CCPA.
• Privacy by Design: Work closely with Legal and Engineering to operationalize data privacy principles across product development.

Qualifications

• Leadership Experience: 12+ years in IT and Information Security, with 5+ years at the VP/CISO level in SaaS or technology-forward companies.
• Transformation Track Record: Proven success in leading large-scale IT modernization projects or "cloud-first" digital transformations during phases of high growth.
• SaaS & Cloud Expertise: Deep technical depth in public cloud architecture (AWS, GCP, Azure) and securing multi-tenant SaaS applications.
• Systems Thinking: Strong understanding of how internal business systems (ERP, CRM, HRIS) interconnect to drive organizational data integrity.
• Talent Builder: Demonstrated success in attracting, retaining, and developing top-tier global IT and security talent.
• Vision + Execution: Ability to set high-level strategy and define ROI metrics while remaining pragmatic and urgent in day-to-day execution.
• Strong Communicator: Exceptional executive presence; able to represent Demandbase with customers, partners, and regulators as the "public face" of trust and security.
• Education/Certifications: CISSP, CCISO, or equivalent required. Additional certifications in cloud architecture (CCSP) or privacy (CIPP) are a significant plus.

Our Commitment to Diversity, Equity, and Inclusion at Demandbase

At Demandbase, we believe in creating a workplace culture that values and celebrates diversity in all its forms. We recognize that everyone brings unique experiences, perspectives, and identities to the table, and we are committed to building a community where everyone feels valued, respected, and supported. Discrimination of any kind is not tolerated, and we strive to ensure that every individual has an equal opportunity to succeed and grow, regardless of their gender identity, sexual orientation, disability, race, ethnicity, background, marital status, genetic information, education level, veteran status, national origin, or any other protected status. We do not automatically disqualify applicants with criminal records and will consider each applicant on a case-by-case basis.

We recognize that not all candidates will have every skill or qualification listed in this job description. If you feel you have the level of experience to be successful in the role, we encourage you to apply!

We acknowledge that true diversity and inclusion requires ongoing effort, and we are committed to doing the work required to make our workplace a safe and equitable space for all. Join us in building a community where we can learn from each other, celebrate our differences, and work together.

Unsolicited Submissions

At Demandbase, we value thoughtful partnerships and direct connections with candidates. We’re not accepting unsolicited resumes or outreach from third-party recruiting agencies. Any unsolicited submissions will not be reviewed, and no fees will be paid.