Head of Infrastructure, Security

This is a fully remote position, open to applicants in Canada.

📋 Description

• Complete responsibility for our cloud infrastructure on GCP, focusing on architecture, reliability, cost management, scalability, and operational excellence.

• Management of the comprehensive cloud-native application environment, which includes containerized and serverless workloads, cloud networking, and a large-scale, multi-tenant data layer (handling numerous terabytes of customer data on MongoDB Atlas), encompassing architecture, performance, and scaling decisions across all components.

• Overseeing deployment, release, and maintenance processes with an emphasis on uptime and minimizing disruption for customers, acknowledging that a platform outage during an active warehouse shift is a significant customer event, not merely a support ticket.

• Leading our senior SRE team, providing architectural vision and direction to advance the platform.

• Managing our comprehensive security program, including policy, posture, tooling, and incident response across both business units.

• Ensuring the achievement and maintenance of SOC 2 Type II compliance (and assessing ISO 27001 as customer demands dictate), which includes driving the program, managing evidence, and coordinating audit relationships.

• Engaging with customers on security matters: responding to questionnaires, facilitating audits, and conducting trust discussions with security-conscious enterprise clients.

• Upholding data protection responsibilities as a data processor, particularly regarding PII management and compliance with relevant privacy regulations (e.g., GDPR, CCPA).

• Overseeing relationships with security vendors (MDR/EDR, SIEM, endpoint protection, penetration testing).

• Supervising the internal IT function, which encompasses corporate network, on-prem and cloud infrastructure, identity management, endpoint management, help desk operations, and vendor relations.

• Providing light oversight of a small, hosted WMS environment on GCP, ensuring its reliability and availability commitments are met.

• Mentoring and developing a well-established IT team, including an IT Manager and IT Administrators responsible for daily operations.

⛳️ Requirements

• Extensive experience managing production cloud infrastructure at scale, preferably on GCP, within a SaaS environment.

• Proven track record in leading a security program for a company handling sensitive customer data, including direct experience in driving SOC 2 Type II (or equivalent) to completion.

• Strong understanding of managing large, multi-tenant database environments; experience with MongoDB is a significant asset due to our tech stack.

• The ability to engage in technical discussions with enterprise customers' security teams with credibility.

• Experience in leading and developing technical personnel, including senior individual contributors, while providing guidance to an established IT team.

• Good judgment regarding the trade-offs between reliability, velocity, and cost that influence infrastructure decisions at a growing company.

🏝️ Benefits

• Competitive Salary

• 4 weeks of paid vacation

• 6 paid sick days and 2 paid personal days annually

• Comprehensive health and dental benefits, effective from your first day!

• Group RRSP/401k Matching

• Work from Home