Director of Information Security

This is a fully remote position, open to applicants in California, +2 more states.

📋 Description

• Act as the inaugural dedicated security leader at Efficient Computer and shape the company's security program.

• Safeguard intellectual property, comply with security standards necessary for defense and government clients, manage export-controlled technology, and enhance the engineering environment.

• Initially oversee information technology comprehensively, including devices, identity, onboarding, offboarding, and operational systems.

• Develop and enforce protective measures for source code, compiler toolchain, and hardware designs.

• Manage engineering access models, repository permissions, credential governance, and conduct regular access reviews.

• Create controls and documentation for the protection of sensitive technical data and trade secrets.

• Secure the developer environment, software supply chain, build pipelines, release integrity, compiler, network, and infrastructure.

• Take charge of detection, logging, incident response, and playbooks.

• Direct NIST SP 800-171 and CMMC programs, including assessments, SSPs, POA&Ms, SPRS, remediation, and audit preparedness.

• Lead the security components of customer, partner, investor, and government due diligence.

• Formulate policies and controls for sensitive and regulated information while training employees on these protocols.

• Implement export control measures, including access segregation, U.S.-person gating, deemed export analysis, classification, licensing, and restricted-party screening.

• Oversee AI tools, sensitive data management, AI tool expenditure, and seat management.

• Function as the lead for data protection and privacy.

• Manage daily IT operations, onboarding/offboarding, device fleet and MDM, identity and access, office infrastructure, vendor relations, licensing, and renewals.

• Develop security and IT roadmaps, counsel leadership, and make budgeting and build-vs-buy decisions.

• Assist in hiring the first dedicated IT Manager and shaping the future security and IT team.

• Join the Operations team, report to the Head of Legal and Compliance, and engage in engineering architecture reviews.

⛳️ Requirements

• 7+ years of experience in information security, including a role as the founding or sole security owner at a company or establishing a previously nonexistent program.

• Practical experience configuring security controls on developer workstations and building infrastructure.

• Proven track record in securing source code and developer infrastructure, including source control platforms, CI/CD, secrets management, and cloud infrastructure.

• Familiarity with NIST SP 800-171, CMMC, or a similar federal framework.

• Experience in IT operations with MDM, identity providers and SSO, automated user lifecycle management, and multi-site networking.

• Knowledge of identity and access architecture, including SSO, MFA, least privilege, and access reviews.

• A service-oriented mindset combined with strategic decision-making abilities.

• Strong written communication skills and the ability to articulate security decisions to engineers.

• Willingness to travel approximately 25% of the time between different offices.

• U.S. person status required: U.S. citizen or lawful permanent resident.

• Preferred: experience with export-controlled technical data, CUI, or facility clearance processes.

• Preferred: background in semiconductor, hardware, or EDA environments.

• Preferred: familiarity with federal or defense customer security requirements.

• Preferred: certifications such as CISSP, GIAC, CMMC CCP, or CCA.

• Preferred: knowledge of Python, Bash, or infrastructure as code methodologies.

• Preferred: experience in deploying or managing AI tools.

🏝️ Benefits

• 10% annual bonus.

• Meaningful equity opportunities.

• 401(k) match.

• Company-paid benefits.

• Paid parental leave.

• Flexible work arrangements.

• Opportunities for skill enhancement and career growth.

• Comprehensive benefits package.