Head of Security

atSuper.comRemote

Canada United States

Full-time Cybersecurity / Security EngineerLeadC$222k – C$293k/year

Posted Oct 15

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Develop and implement the security roadmap for Super.com

• Oversee and manage the security division

• Assess security risks and ensure compliance with regulations

• Provide customers with a secure and safe product

• Report directly to the Senior Director of Infrastructure Engineering

• Collaborate with leaders from Legal, Data, Engineering, Product, Finance, and HR

• Maintain direct engagement with the executive team and board

• Lead recruitment efforts for engineers, GRC personnel, and SOC partners

• Manage junior individual contributors through Staff and Director-level reports

• Mentor direct reports towards impactful career opportunities

• Take ownership of OKR setting and strategic planning across security domains

• Enhance governance, risk, and compliance functions

• Broaden the control framework with automated evidence, policy lifecycle, risk management, and privacy obligations

• Oversee the development of AI-native vulnerability management and detection tools

• Provide security guidance as the company integrates AI

• Utilize AI to scale the team's productivity

• Establish a security culture through training, secure-by-default practices, developer support, and clear expectations

• Ensure the security of customers and products through tool selection, organizational structure, and focused security teams

• Offer technical leadership and final approval on security architecture across Engineering

• Be accountable to the board for the overall security posture and risk acceptance

• Assist in selecting and swiftly deploying evolving security tools

⛳️ Requirements

• Over 10 years of experience in security

• More than 4 years of experience leading a security function or a significant area

• Experience in managing managers/directors and senior technical leaders (Staff+)

• Managed company-level security strategy, budget, and outcomes from start to finish in a fast-paced tech environment

• Hands-on experience in at least two of the following: application/product security, infrastructure security, detection and incident response, enterprise IT and identity, and GRC

• Demonstrated success in supporting fast-paced software development teams at scale

• Experience establishing or scaling a GRC program, including control frameworks, evidence automation, policy creation, and privacy program management

• Familiarity with SOX, GDPR, PCI, SOC 2, and/or ISO 27001 frameworks

• Proven experience presenting to and collaborating directly with a Board or Audit Committee, external auditors, regulators, or QSAs

• Expertise in security risk quantification, acceptance, and converting technical risks into business impacts

• Strong history of recruiting security professionals and nurturing engineers into technical and leadership roles

• Direct experience and notable achievements in driving AI transformation within security, engineering, and/or IT organizations

• Relevant experience with Kubernetes-based microservices, Python FastAPI, TypeScript React, Postgres, Redis, Kafka, Elasticsearch, Snowflake, AWS, EKS, MSK, ElastiCache, RDS, Istio, Helm, Terraform, Crossplane, Kyverno, and Datadog