Director of Information Security

About the role

As the Director of Information Security you will own Constructor’s security program end‑to‑end, protecting the platform, customer data, and the team. Reporting to the CIO, you will shape strategy and execute it in a high‑autonomy, remote‑first environment.

Key responsibilities

• Answer prospect security questions, complete questionnaires and represent Constructor’s security posture to customers.
• Own SOC 2 Type II and ISO 27001 certification programs, manage auditors and maintain continuous compliance.
• Lead incident response from detection through resolution and post‑mortem, and improve the response plan.
• Conduct risk assessments, maintain the risk register and present risk posture to leadership and the board.
• Run quarterly access reviews, enforce least‑privilege principles and advise internal teams on tool and vendor security.
• Define AI governance guardrails, oversee DLP and insider‑threat programs, and manage third‑party vendor security assessments.
• Maintain security awareness training and collaborate with Platform Engineering on cloud (AWS), container and vulnerability management.

Required profile

• 5+ years of information security experience, including at least 2 years in a senior leadership role.
• 2+ years of hands‑on DevOps or Platform Engineering experience.
• Strong English written communication for policies, questionnaire responses and board‑level summaries.
• Comfortable in customer‑facing settings and able to operate independently in a fully remote culture.

Required skills

• Proficiency with AI tools such as Claude Code.
• Deep familiarity with compliance frameworks: SOC 2, ISO 27001, GDPR, CCPA.
• Incident response ownership in SaaS or cloud‑native environments.
• Identity management (Okta or similar), MDM, DLP and cloud security tooling.
• Application security knowledge for modern stacks.
• Experience with AWS, container security and vulnerability management.

What we offer

• Unlimited vacation time (minimum 3 weeks encouraged).
• Competitive compensation package including stock options.
• Fully remote work with a work‑from‑home stipend.
• Apple laptops for new employees.
• Annual training and development budget.
• Parental leave for qualified employees.