Greenhouse Vice President, Security at Greenhouse leading company-wide security strategy and execution across product, corporate, and information security. Advises executive leadership and Board on security posture, risk, and investments.
Responsibilities
Define and own Greenhouse’s security strategy, multi-year roadmap, operating model, budget, and investment priorities
Lead a multidisciplinary security organization spanning product security, corporate security, and information security. Build it to be AI-native, using automation and agentic workflows to scale assessments, triage, investigations, and compliance evidence
Build and develop a strong leadership bench, including hiring, coaching, succession planning, and career development
Own Greenhouse’s security risk posture, including enterprise, third-party, and vendor risk, and risk acceptance decisions. Set risk appetite with the ELT and oversee compliance and assurance programs, including SOC 1, SOC 2, ISO 27001, ISO 27701, and ISO 42001
Lead security response for serious incidents, from detection and triage through executive, customer, regulatory, and post-incident communications
Own annual disaster recovery exercises with Platform Engineering and regulatory notification timelines
Establish governance for how AI is used across Greenhouse, by our people and in our product, including acceptable-use policies and standards, data handling, access boundaries, human oversight, and auditability
Lead Greenhouse’s data security and governance program, including data classification, access controls, data loss prevention, and data residency, in partnership with Privacy and Legal
Partner with Product, Engineering, IT, Legal, Privacy, and Finance on secure-by-default design, identity, and customer commitments
Advise Sales and Customer Success on strategic security reviews and enterprise deals, and join customer trust conversations with CISOs and CTOs as needed
Represent Greenhouse security with the Board, customers, prospects, partners, auditors, and industry audiences
Lead security due diligence and integration for mergers and acquisitions