VP of Information Security

Type: Full-Time, Direct Hire

Salary: $200k - $250k 30% bonus

Location: Denver, CO

Schedule: Onsite 3 days per week

We are seeking a senior security leader to own and evolve our enterprise information security strategy, program, and culture. This executive will serve as the top security leader for a high-growth SaaS organization, partnering closely with executive leadership, engineering, and product teams to protect customer data, enable secure product innovation, and scale a world-class security function.

This is a highly visible role that requires a balance of strategic vision, operational excellence, and executive communication.

What You Will Do

Security Leadership and Strategy

• Define and execute a multi-year security roadmap aligned to business goals and growth
• Serve as the primary advisor to executive leadership on cyber risk, security posture, and investments
• Lead and scale a high-performing security organization across Security Operations, GRC, Application Security, and Cloud Security
• Drive a company-wide security-first culture through education, accountability, and leadership alignment
• Translate complex technical risk into clear business impact for executive and board-level stakeholders
• Establish governance around emerging risks including AI security and data protection

Cloud and Product Security

• Secure a cloud-native SaaS platform across AWS, Azure, or GCP environments
• Partner with Engineering and Product to embed security into the SDLC and development lifecycle
• Oversee IAM, Zero Trust architecture, encryption, and cloud security posture management
• Define security standards across APIs, microservices, containers, and third-party integrations

Governance, Risk, and Compliance

• Own the information security management system, risk register, and policy framework
• Lead SOC 2 Type II, PCI DSS, and other regulatory and compliance initiatives such as ISO 27001, GDPR, and CCPA
• Support enterprise sales through security reviews, customer questionnaires, and trust programs
• Build and manage third-party risk and vendor security programs

Security Operations and Incident Response

• Lead a mature security operations capability including SIEM, EDR, and threat intelligence
• Own incident response, business continuity, and disaster recovery programs
• Provide ongoing executive visibility into threat landscape and risk posture

What You Bring

• 12 years of progressive experience in information security, including 4 years in a VP, CISO, or equivalent leadership role
• Proven experience leading security within a B2B SaaS or cloud-native organization is required
• Deep expertise in cloud security, modern threat detection, and secure software development practices
• Strong track record with SOC 2, PCI, and enterprise compliance programs
• Experience building and scaling security teams in high-growth environments
• Exceptional ability to communicate with executive leadership and board members

Required Qualifications

• Background in the SaaS industry is required
• Bachelor's degree in a STEM field such as Computer Science, Information Systems, Cybersecurity, or a related discipline is required
• Advanced degree or MBA preferred
• Industry certifications such as CISSP, CISM, CCSP, or CISA are a plus

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, and Los Angeles County Fair Chance Ordinance.