Nextdoor Chief Information & Security Officer at Nextdoor leads enterprise and product security and oversees corporate IT and business systems. The role includes managing security programs, compliance, and collaboration with Engineering.
Responsibilities
Own Nextdoor’s security program end to end, including strategy, policies, risk assessments, and employee training, with a roadmap tied to the company’s biggest risks and progress reported through clear metrics
Regularly report on security risks to the executive team and the Audit & Risk committee of the Board, and work with Legal on timely assessment and disclosure of material incidents as a public company
Set security standards for the Nextdoor platform (mobile apps, web, APIs, and cloud infrastructure) and partner with Engineering, which is accountable for fixing issues, to build security into how software is designed, built, and released
Run application security, including code review, dependency scanning, penetration testing, vulnerability management, and a responsible disclosure or bug bounty program, and lead security reviews of new products, features, and third-party code
Protect member and customer data through encryption, access controls, and monitoring, and work with Legal on privacy requirements in the countries where we operate
Run threat detection and monitoring across devices, cloud, the platform, and business systems, with outside providers where needed, and keep a tested incident response plan (including for a product data breach) with regular exercises with Engineering and Legal
Secure corporate and business systems (devices, logins, email, Slack, and the systems that hold customer and financial data), and assess and manage security vendors and third-party providers
Lead security audit and compliance work, including SOX, IT general controls, SOC 2, and ISO 27001, in partnership with Internal Audit
Oversee the teams that run Workday (ERP and HCM) and Salesforce (Sales & Service Cloud)
Partner with the business systems leaders on the integration and automation of business systems across Finance, People, Customer Operations and Revenue Operations
Oversee corporate IT operations, including identity and access (Okta), device management (Jamf), Google Workspace, Slack, IT asset management, and helpdesk
Set the security approach for employee AI tools: which tools are approved and how company data is protected
Qualification
Manage the IT budget and software spend10+ years of experience in securityDeep
Required
Manage the IT budget and software spend, including forecasting, vendor management, and contract negotiation
Stay on top of emerging threats and technology trends and assess their potential impact on the business
10+ years of experience in security, including several years leading security teams
Experience building and leading a security team, including application security engineers and outside providers
Deep, hands-on experience running a security program for both a corporate environment and a consumer-scale product, including application security, cloud infrastructure security, and secure software development
Track record of working with engineering teams to fix vulnerabilities and change how software gets built, without slowing delivery
Experience leading the response to a real security incident, including working with outside responders, Legal, and Communications
Experience securing a public company or other SOX-regulated environment, with familiarity with SOC 2 or ISO 27001 audits and vendor security reviews
Working knowledge of endpoint detection and response, security monitoring, and identity and access management tools (we use Okta)
Familiarity with rolling out AI tools across a company and measuring adoption and spend
Experience driving cross-team change while aligning diverse stakeholders
Strong leadership and interpersonal skills, with an emphasis on mentoring and coaching team members
