- Define and own the security strategy, multi-year roadmap, operating model, budget, and investment priorities.
- Lead product security, corporate security, and information security, using automation and agentic workflows to scale assessments, triage, investigations, and compliance evidence.
- Build and develop the security leadership bench through hiring, coaching, succession planning, and career development.
- Own enterprise, third-party, and vendor risk, risk acceptance decisions, risk appetite, and compliance and assurance programs.
- Lead serious security incident response from detection and triage through executive, customer, regulatory, and post-incident communications.
- Own annual disaster recovery exercises with Platform Engineering and regulatory notification timelines.
- Establish AI-use governance, including acceptable-use policies, data handling, access boundaries, human oversight, and auditability.
- Lead data security and governance, including data classification, access controls, data loss prevention, and data residency.
- Partner with Product, Engineering, IT, Legal, Privacy, and Finance on secure-by-default design, identity, and customer commitments.
- Advise Sales and Customer Success on strategic security reviews and enterprise deals, represent security with stakeholders, and lead security due diligence and integration for mergers and acquisitions.
Risk Management