Head of Security & Compliance Job at Plaud (San Francisco)

Head of Security and Compliance

The Head of Security and Compliance will be responsible for building and leading...

Location

United States

Salary:

Not provided

Eight Sleep

Expiration Date

Until further notice

Requirements

8-10+ years of experience in security engineering, with deep expertise in mobile app security, IoT device security, or cloud infrastructure security
Proven expertise in cybersecurity, cloud infrastructure security (AWS), IoT device security, and corporate risk management
Experience in consumer technology, health tech, or regulated industries is highly desirable
Strong knowledge of compliance standards (SOC 2, ISO 27001, HIPAA, GDPR, etc.)
Excellent communication and stakeholder management skills
Ability to balance risk with business agility in a fast-paced startup environment

Job Responsibility

Oversight and implementation, operation and monitoring of information security tools and processes in customer production environments
Responsible for conducting IT risk assessments, documenting identified threats and maintaining risk register
Communicates information security risks to executive leadership
Reports information security risks annually to Eight Sleep leadership and gains approvals to bring risks to acceptable levels
Define and own Eight Sleep’s end-to-end security strategy across cloud, product, corporate, and customer environments
Serve as the primary security advisor to the executive team—translating risk into clear business decisions and helping set the company’s security posture and risk tolerance
Build and scale Eight Sleep’s security program, including roadmap, processes, metrics, and future team structure
Oversee security architecture and practices for software, cloud infrastructure, connected devices (IoT), and data storage
Ensure compliance with security frameworks (e.g., SOC 2, GDPR, HIPAA)
Lead vulnerability management, threat detection, and incident response

What we offer

Equity participation
Periodic equity refreshments based on performance
Every Eight Sleep employee receives a Pod

Fulltime

Head of Security Projects and Compliance

You’ll have an important part to play for the assurance of a safe and secure wor...

Location

United Kingdom , Nuneaton

Salary:

60000.00 GBP / Year

Unipart Logistics

Expiration Date

Until further notice

Requirements

Demonstrable engaging leadership experience in a security risk management position, ideally within the logistics industry
Excellent knowledge and understanding of Supply Chain Security Solutions (Warehouse and Transport) and operational procedures
High level of demonstrable knowledge regarding the management and delivery of multiple security projects in complex environments
Proven experience in prioritising own workload around tight deadlines in a pressurised environment
Excellent presentation and communication skills, as well as excellent organisational skills
Management of physical security systems to ensure effective control measures remain proportionate and cost effective
Demonstrate in-depth experience of managing external security suppliers
High level of PC literacy, in particular Microsoft Office and Google suite

Job Responsibility

Proactively develop collaborative relationships with our Commercial, Bid Management and Project teams to ensure active engagement on all new business opportunities and projects
Manage the installation of any security infrastructure upgrades and/or new builds as required
Ensure all relevant security documented processes and procedures are developed and implemented across your area of responsibility
Work collaboratively with the Security Operations team to identify cost efficiencies and resource optimisation on security related projects
Safeguard the reputation of the business by ensuring strict adherence to legislative, regulatory, and customer security requirements are effectively implemented and maintained (E.g. AEO, C-TPAT)
Support and mentor the Security Operations team to ensure site Security Risk Classification and audit programmes are strictly adhered to
Investigate breaches of technical security policies
Provide security systems training and ongoing support
Serve as a point of contact for security-system related issues

What we offer

car / car allowance
33 days holiday
pension
life assurance
employee assistance programme
wellbeing support
flexible benefits scheme

Fulltime

Head of Workforce Security and Compliance

Head of Workforce Security and Compliance is a senior leadership position within...

Location

United Kingdom , London

Salary:

Not provided

360 Resourcing Solutions

Expiration Date

Until further notice

Requirements

Extensive experience in senior security leadership, ideally in large-scale international events, complex organisations, or critical infrastructure.
Proven track record in workforce planning, workforce security management and security training.
Experience in procurement and delivery of significant security contracts
Experience managing cross-functional teams and multiple security programs simultaneously.
Strong leadership, strategic thinking, and decision-making capabilities.
Proficiency in workforce modelling, resource planning, and operational security frameworks.
Experienced in trusted workforce programme development through risk-based analysis
Excellent communication and stakeholder management skills.
Problem solver – ability to use own initiative to find new solutions and methods of working

Job Responsibility

Strategic planning, oversight, and delivery of all workforce-focused security and compliance functions for the tournament.
Private Contract Safety & Security Planning – planning, procurement, and deployment of safety and security personnel across all venues.
Trusted Workforce Program, Training & Communications – overseeing vetting, safeguarding, training, and security-conscious communications.
Developing policies, operational frameworks, and workforce strategies that mitigate risk, enhance security outcomes, and deliver a robust, reliable, and compliant workforce.

What we offer

25 days holiday
contributory pension
Private Medical Insurance

Fulltime

Head of Information Security, Risk and Compliance

Senior leadership position within the IT Operations team. The primary mission is...

Location

United Kingdom , Thame

Salary:

110000.00 GBP / Year

Travelodge Hotels Limited

Expiration Date

Until further notice

Requirements

Certifications: CCSP, CISSP-ISSMP, or CISM
Methodologies: ITIL v4 Foundation
FAIR Risk Modelling
experience in Project Management or Business Change
Advanced Tech: Experience defining Zero Trust Architecture (ZTA) and implementing security controls within public cloud environments (IaaS/PaaS)
pragmatic, hands-on leader
master of communication
self-starter
technical expertise rooted in securing critical B2B and B2C eCommerce platforms, particularly within hosted and SaaS-heavy environments
expert-level knowledge of perimeter, cloud, network, and data security

Job Responsibility

Strategic Leadership: Develop a continuously evolving security roadmap and "defence in depth" strategy
manage both internal teams and strategic third-party partners
Operational Management: Oversee 24x7x365 security operations, including continuous monitoring, threat assessment, incident response (CIRT)
Risk & Compliance: Develop and maintain an industry-standard Risk Management framework
ensure compliance with PCI-DSS, GDPR, and NIST frameworks
Governance & Policy: Maintain Information Security policies and conduct regular audits of processes and controls
Technical Oversight: Coordinate vulnerability management, penetration testing, and code reviews
provide "Secure by Design" architectural guidance for all new initiatives
Supply Chain & Budget: Manage a portfolio of security vendors to ensure value and responsiveness
oversee the OPEX and CAPEX budgets that enable your function to operate and continuously improve

What we offer

Annualise Bonus
Car Allowance
Contributory pension scheme
50% personal discount for hotel bookings and great friends and family discounts too
25 days holiday + bank holidays, increasing with length of service
A focus on learning and career development

Fulltime

Head of Security

Sentry’s users trust us to develop, ship, and operate a secure open-source produ...

Location

United States , San Francisco

Salary:

260000.00 - 350000.00 USD / Year

Sentry

Expiration Date

Until further notice

Requirements

Deep understanding of modern security domains with expertise in at least two of: application/product security, infrastructure security, corporate/IT security
10+ years relevant experience, including 5+ years in security-focused roles and prior management experience
Strong technical background (CS degree or equivalent software engineering experience)
Proven experience building and managing security programs (bug bounty, pen testing, red teaming, secure SDLC, training)
Demonstrated success in SaaS security (multi-tenant architecture, cloud controls, customer-facing assurances)
Extensive collaboration with IT & Compliance on identity/access management, endpoint posture, and policy
Experience working directly with auditors (e.g., SOC 2/Type II, ISO 27001) including evidence collection, remediation planning, and closing findings
Self-motivated owner who can both set strategy with leadership and execute through roadmaps, metrics, and teams

Job Responsibility

Ensure security for our SaaS platform—establish and operate the controls, guardrails, and monitoring required for a modern, high-scale, multi-tenant cloud service
Partner deeply with IT & Compliance on identity and access, endpoint/security baselines, vendor risk, policy, and audits
drive secure-by-default corporate foundations
Collaborate with executive leadership to fine-tune and evolve Sentry’s security strategy, set multi-year roadmaps, and communicate risks, tradeoffs, and outcomes
Build application and product security programs with support from the CTO and IT/Compliance orgs, including managing external parties for penetration tests and bug bounty programs
Prioritize automation and tooling over manual process
measure outcomes and continuously reduce risk and toil
Partner with Recruiting to build a world-class security team across AppSec, ProdSec, and GRC capabilities
Influence product roadmaps and customer-facing security features (e.g., MFA, session audit tooling, data controls)
Explore future security-adjacent product opportunities where Sentry can add value to developers and security teams

What we offer

Offers Equity
incentive compensation
equity grants
paid time off
group health insurance coverage

Fulltime

Head of Security

Sentry’s users trust us to develop, ship, and operate a secure open-source produ...

Location

United States , San Francisco

Salary:

260000.00 - 350000.00 USD / Year

Sentry

Expiration Date

Until further notice

Requirements

Deep understanding of modern security domains with expertise in at least two of: application/product security, infrastructure security, corporate/IT security
10+ years relevant experience, including 5+ years in security-focused roles and prior management experience
Strong technical background (CS degree or equivalent software engineering experience)
Proven experience building and managing security programs (bug bounty, pen testing, red teaming, secure SDLC, training)
Demonstrated success in SaaS security (multi-tenant architecture, cloud controls, customer-facing assurances)
Extensive collaboration with IT & Compliance on identity/access management, endpoint posture, and policy
Experience working directly with auditors (e.g., SOC 2/Type II, ISO 27001) including evidence collection, remediation planning, and closing findings
Self-motivated owner who can both set strategy with leadership and execute through roadmaps, metrics, and teams

Job Responsibility

Ensure security for our SaaS platform—establish and operate the controls, guardrails, and monitoring required for a modern, high-scale, multi-tenant cloud service
Partner deeply with IT & Compliance on identity and access, endpoint/security baselines, vendor risk, policy, and audits
drive secure-by-default corporate foundations
Collaborate with executive leadership to fine-tune and evolve Sentry’s security strategy, set multi-year roadmaps, and communicate risks, tradeoffs, and outcomes
Build application and product security programs with support from the CTO and IT/Compliance orgs, including managing external parties for penetration tests and bug bounty programs
Prioritize automation and tooling over manual process
measure outcomes and continuously reduce risk and toil
Partner with Recruiting to build a world-class security team across AppSec, ProdSec, and GRC capabilities
Influence product roadmaps and customer-facing security features (e.g., MFA, session audit tooling, data controls)
Explore future security-adjacent product opportunities where Sentry can add value to developers and security teams

What we offer

incentive compensation
equity grants
paid time off
group health insurance coverage

Fulltime

Head of Information Security & IT Risk

Bibby Financial Services are growing, and we’re looking for a Head of Informatio...

Location

United Kingdom , Manchester

Salary:

75000.00 - 90000.00 GBP / Year

360 Resourcing Solutions

Expiration Date

Until further notice

Requirements

Proven experience in information security and IT risk management, preferably within financial services or other regulated industries
Strong leadership background, with experience managing and developing high-performing teams in complex environments
Deep understanding of cyber security principles, IT risk frameworks, and operational resilience practices
Demonstrated ability to design and implement security strategies, policies, and controls aligned with business and regulatory requirements
Hands-on experience with security technologies such as firewalls, SIEM, endpoint protection, and vulnerability management tools
Skilled in conducting risk assessments, managing IT risk registers, and overseeing assurance activities including penetration testing and incident response
Familiarity with relevant standards and frameworks (e.g. ISO 27001, NIST, COBIT, GDPR, DORA)
Strong stakeholder engagement skills, with the ability to influence and communicate effectively at C-level
Experience supporting internal and external audits, regulatory reviews, and cross-functional collaboration
Track record of promoting security awareness and embedding best practices across an organisation

Job Responsibility

Lead and develop the Information Security & IT Risk team
Identify, assess, and manage IT-related risks including security, operational, development, delivery, supplier, compliance, and strategic risks
Perform and support risk assessments for new systems, projects, and third-party vendors
Ensure compliance with relevant standards, regulations, and frameworks
Oversee the deployment and operation of security tools and technologies (e.g., firewalls, SIEM, endpoint protection, zero-trust technologies)
Manage penetration testing and other assurance activities, including remediation of findings
Lead incident response planning and investigation of security breaches, ensuring timely resolution and reporting
Act as the primary point of contact for all information security and IT risk matters
Provide regular reporting to senior and executive management on security posture and risk status
Promote a culture of security awareness and compliance across the organisation

What we offer

25 days’ holiday plus bank holidays, increasing with service, with buy/sell options
Performance Bonus
Hybrid working
Private healthcare for you and your family
Company pension scheme
Flexible benefits (gym membership, tech, health assessments and more)
Access to an online wellbeing centre
Discounts with a wide range of retailers

Fulltime

Head of IT Security

We are looking for a senior IT security leader to define, implement and assure o...

Location

United Kingdom , Birmingham; Leeds; London

Salary:

Not provided

Capsticks Solicitors LLP

Expiration Date

Until further notice

Requirements

Senior IT security leadership experience, ideally with exposure to CISO-level responsibilities
Strong knowledge of security operations, identity and access management, cloud and network security, endpoint protection, email security and modern models such as Zero Trust / ZTNA
Experience working with ISO27001, Cyber Essentials Plus and recognised security frameworks such as CIS Controls or NIST
The ability to translate risk and compliance requirements into practical controls, services and improvement plans
Experience managing teams, vendors and managed security services, ideally in a SaaS-focused professional services environment
Clear communication skills, with the confidence to explain complex security topics to senior stakeholders, technical teams and external parties
A pragmatic, outcome-focused and forward-looking approach, with the resilience to work effectively under pressure

Job Responsibility

Defining and implementing security strategy, standards and controls aligned to ISO27001, Cyber Essentials Plus and the firm’s wider data, AI and innovation strategies
Overseeing security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response
Embedding security by design into projects, change and solution architecture, including identity, endpoint, cloud, network, email and secure remote access controls
Working with Governance & Risk to maintain and improve the ISMS, support audits and ensure regulatory and client expectations are met
Providing clear reporting on security posture, risks, incidents and improvement plans to technical and non-technical stakeholders
Promoting a strong security culture through awareness, training and practical guidance on secure behaviours

What we offer

Inclusive employer
reasonable adjustments

Fulltime

Select Country

Head of Security & Compliance

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?