Back to jobs

Head of Security

Remote

Overview:

Crisis Text Line provides free, 24/7, high-quality text-based mental health support and crisis intervention by empowering a community of trained volunteers to support people in their moments of need.

Our mission is at the intersection of empathy and innovation — we promote mental well-being for people wherever they are.

Our vision is an empathetic world where nobody feels alone.

Our core values are at the heart of all we do: connect with empathy, center equity, get it done together, and reflect and evolve.
 

Why you should join our team: 

  • Our work is transforming the way people in pain access support at their fingertips
  • Our work is innovative in the crisis response space
  • Our dynamic, fun, and diverse culture
  • Our meaningful cause, led by empathy and innovation
  • Our strong values at the center of all we do
  • Our commitment to diversity, equity and inclusion
  • Our commitment to engagement and belonging
  • Our commitment to our employees and their holistic wellbeing
  • Our  value of work/life balance
  • Our growth mindset and prioritize professional development
  • Our leaders who truly care

What you'll be doing:

The Head of Security is responsible for establishing and driving our security strategy across our company, our service, and our software platform.  This strategy will ensure our operations, software, data, and execution are well-protected and compliant with global information security perspectives. This role involves identifying, developing, implementing, and maintaining tools and processes to reduce information security risks. This role will own our IT team to drive corporate security, and will work directly with our software engineering and product teams to ensure platform security.

Responsibilities:

Crisis Text Line is a fast moving, growing organization with a big vision and a critical mission. To serve our mission and vision, each role must be agile and flexible to meet the needs of the business, aligning  daily work with business priorities as defined by managers and team leaders.

Strategy and Leadership

  • Develop and implement a strategic, long-term information security plan that aligns with business goals.
  • Design, implement, and maintain a comprehensive security program to safeguard corporate assets, infrastructure, and data.
  • Lead a team of security professionals, including hiring, training, mentoring, and evaluating staff.
  • Establish and enforce security policies, standards, and guidelines for IT systems.
  • Work closely with executive management to determine acceptable levels of risk.

Risk Management and Compliance

  • Conduct risk assessments to identify security vulnerabilities and threats, and prioritize mitigation efforts.
  • Develop incident response plans, including strategies for communication, investigation, and resolution.
  • Lead the organization’s response to security incidents and breaches.

Security Operations

  • Oversee the monitoring and analysis of potential security threats and vulnerabilities.
  • Implement and manage security tools, such as firewalls, intrusion detection systems, anti-virus software, and authentication systems.
  • Ensure the security of cloud services, data centers, network infrastructure, and end-user devices.
  • Conduct regular security audits, penetration testing, and vulnerability assessments.

Education and Awareness

  • Develop and deliver security training programs for employees at all levels.
  • Foster a culture of security awareness and encourage proactive incident reporting.

Qualifications:

  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent work experience 
  • 10+ years of experience in information security, including at least 5 years in a leadership role.
  • Direct experience at companies shipping software platforms to customers.
  • Proven experience in developing and implementing security strategies.
  • In-depth knowledge of cybersecurity trends, threats, and mitigation strategies.
  • Excellent leadership, communication, and organizational skills.
  • Experience with security technologies and cloud security solutions.
  • Experience in organizations which need to comply with SOC2, HIPAA, and GDPR etc

Reliable High-Speed Internet Required: Must have a stable high-speed internet connection to support seamless remote collaboration, virtual meetings, online job tasks, etc.

The full salary range for this position, across all United States geographies, is ($198,440 - $268,310 per year. The upper portion of the salary range is typically reserved for existing employees who demonstrate strong performance over time. Starting salary will vary by location, qualifications, and prior experience; during the interview process, candidates will learn the starting salary range applicable for their location. We pay competitively in the tech-forward nonprofit space and offer a robust benefits package.

Only candidates in the following states will be eligible for employment: CA, CO, CT, FL, GA, HI, IL, IN, IA, MD, MA, MI, MO, NJ, NM, NY, NC, OH, PA, TN, TX, UT, VA, WA.

Benefits:

Crisis Text Line employee  benefits are thoughtfully designed using an equity lens, acknowledging that we are all unique human beings with individual life circumstances that require flexibility and support. 

 Benefits include: 

  • 20 paid holidays including:
    • Federal  holidays like Juneteenth and Labor Day
    • Election day
    • Holiday break from Dec 24  through January 1
    • 2 renewal days 
    • 2 floating holidays  
  • Flexible  paid time off, including: 
    • 15 vacation days
    • 3 personal days
    • 7 sick days 
  • Medical, dental, and vision benefits for the staff member and family at no cost to the employee
  • 403B retirement plan (the nonprofit equivalent of a 401K): 3% contribution by Crisis Text Line to support building financial wellness,  regardless of personal contribution
  • 12 weeks paid parental leave (after 6 months of employment)
  •  Student loan repayment (after 2 years of continuous full time service)
  • Family support through a virtual childcare platform
  • Stipends/Allowances
    • Mental health  (Monthly) 
    • Internet Service (Monthly) 
    • Professional Development (Annual)
    • Wellness (Annual)
    • Home office setup (One time/First year)

(Benefits are only for US-based employees. International benefits may differ).

Crisis Text Line is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We provide reasonable accommodation to individuals who have a disability and meet the skill, experience, education, and other job-related requirements of the role to allow the individual to perform the essential functions of the job.



Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Crisis Text Line’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.