Back to jobs
New

Director of Information Security

United States, Canada
We are a team of doers, seasoned engineers, hackers and builders, working on the future of streaming data.

Funded by premier investors including GV and Lightspeed, Redpanda is building the streaming data platform for developers. We’re evolving streaming beyond the Apache Kafka® protocol into a unified “engine of record” that delivers a categorical reduction in complexity, wicked-fast performance, onboard Wasm transforms, and transparent tiered storage that gives consumers access to both real-time and historical data from a single API.
 

About the Role:

We are looking for an accomplished and forward-thinking Director of Information Security to join our leadership team. You will lead the security, privacy, governance, compliance and risk management functions for our innovative and fast-moving company. Our customers rely on us for their mission critical functions, and their trust and safety are critical to our success. In this role you will partner with teams across the company to design and implement robust security and risk mitigation strategies, ensure compliance with industry regulations, and efficiently support our business objectives. You’ll serve as key advisor to our executive team on security and compliance matters, and drive a security-focused culture across the entire organization.

You Will:

  • Lead a team of high-performing compliance and security professionals and provide career guidance
  • Define our forward-looking information security strategy to support business goals and mitigate risks. Drive maturation of our compliance and security processes and practices
  • Provide guidance to leadership on security and compliance priorities for the company and communicate status to stakeholders
  • Partner with internal business function leaders (e.g., IT, Legal, Engineering, Vendor Procurement, HR, etc.) to deliver successful, business-enabling security, privacy and risk management practices 
  • Ensure secure software development practices by defining standards, developing automation and providing tooling
  • Manage security operations including identification and remediation of vulnerabilities and security monitoring, and response to security incidents
  • Coordinate consistent, accurate and efficient responses to prospective and existing customer security questionnaires
  • Develop, update, and/or maintain standard operating procedures, including any associated KPIs and reporting
  • Maintain SOC2 compliance and design/facilitate future compliance initiatives supporting business objectives
  • Maintain and administer compliance tooling, evidence and associated documentation
  • Coordinate internal and third party compliance audits for security and privacy, liaising between third party auditors and internal staff
  • Maintain subject matter expertise of applicable privacy laws and regulations and align corporate practices as required
  • Provide functional expertise to support the organization's risk identification, assessment and treatment processes. Orchestrate regular review of the corporate risk matrix
  • Coordinate, assess and improve regular testing of business continuity/disaster recovery practices
  • Provide training on security and compliance across the organization

You Have:

  • 10+ years of experience in security, privacy and/or compliance roles supporting software development, ideally in an enterprise SaaS context
  • 7+ years of experience in leading security, privacy and/or compliance teams
  • Deep knowledge of - and proven ability to implement and manage - security, privacy and risk management compliance programs
  • Expertise with cybersecurity,  risk assessment, vulnerability assessment tools and best practices
  • Knowledge of security, compliance and regulatory frameworks 
  • Ability to roll up your sleeves to tackle projects individually while leading a team
  • Demonstrated ability to deliver results collaboratively through establishing shared strategic vision
  • Eagerness to thrive in a fast growing, dynamic environment and comfortable working remotely with a 100% distributed team
  • Strong verbal and written communication skills and demonstrated technical competency, with adaptability to address audiences from diverse teams and roles (individual contributors to executives)
  • An ability to empathize with your fellow employees, designing and negotiating policies and procedures that enable needed business outcomes while minimizing friction and overhead

Nice to Have: 

  • Experience with data infrastructure systems, esp. real-time systems
  • Experience with security and privacy in a Cloud environment (AWS, GCP, Azure)
  • Relevant certifications in cybersecurity, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)

 

U.S. base salary range for this role is $255,500 - $300,000 (CA, NY, WA) and  $244,500 - $287,000 (other US locations). Our salary ranges are determined by role, level, and location. As a remote-first company, we strive to consider each candidate's job-related skills, location, experience, relevant education or training to determine individual base salary. Your talent partner will share more about the specific salary range for your preferred location during the hiring process.

Redpanda is used by Fortune 1000 enterprises pushing hundreds of terabytes a day, as well as by the solo dev prototyping a React application on her laptop. Think of it as a streaming data API platform that scales with you from the smallest projects to petabytes of data distributed across the globe.
Join Redpanda if you’d enjoy being part of a fast-moving, 100% remote organization with team members around the globe and a culture based on trust, transparency, communication, and kindness. 

#LI-Remote

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...
Select...

When you apply to a job on this site, the personal data contained in your application will be collected by Redpanda Data, Inc. (“Controller”), which is located at 5758 Geary Blvd, #153 San Francisco, CA 94121 and can be contacted by emailing legal@redpanda.com. Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.
Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses or another legally recognized manner. You can obtain a copy of the standard contractual clauses by contacting us at legal@redpanda.com.
Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Redpanda Data’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.