Base Career helps you apply smarter for this job.
Key skills for this role
Improve and maintain perimeter and network-layer defenses (WAF, Rate Limiting, Anti-bot ,DDoS mitigation
Secure product APIs against abuse and anomalous traffic
Strengthen authentication, authorization, and access control at the product level, including IDOR-class issues
Run the Vulnerability Management process: identification, prioritization, and remediation tracking
Coordinate external pentests and drive remediation of findings
Lead Incident Response for product security incidents
Build detection and response processes together with the monitoring team
Contribute to Fraud & Trust and Safety initiatives with relevant teams
Protect customer data at the product level (access control, encryption, masking)
Run the Security Champions program to train product teams on secure development
Manage the Bug Bounty program
7+ years in senior Information Security leadership (CISO, VP of Security, or Head of InfoSec), with a proven track record of mentoring or advising emerging security leaders.
Zero-to-One Experience: Proven experience building, scaling, and managing an Information Security program entirely from scratch for a startup or scaling enterprise.
High-Compliance Expertise: Deep, practical knowledge of operating in heavily regulated markets (e.g., FinTech, HealthTech, GovTech) and successfully leading organizations through rigorous audits (SOC 2 Type II, ISO 27001, PCI-DSS, HIPAA, or GDPR).
Highload/Scalability Acumen: Strong architectural understanding of securing high-throughput, highly available, distributed systems and cloud-native environments (AWS/GCP/Azure) without bottlenecking performance.
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
, AUS
, AUS
, AUS
, USA
, USA
, USA
, USA
, AUS
Strategic GRC (Governance, Risk, and Compliance): Ability to teach and establish risk management frameworks, compliance roadmaps, and vendor risk management processes.
Executive Communication: Exceptional ability to translate complex technical risks into business impacts, and experience coaching others on how to present security strategies to C-level executives and the Board of Directors.
Incident Response Leadership: Experience establishing and commanding an enterprise-grade Incident Response plan, including crisis management and post-breach communications.
Security Culture Building: Demonstrated ability to foster a "security-first" culture across engineering, product, and business teams.
Fluent Russian
Private social-technology company building online communication platforms and investing in social-discovery startups worldwide.
Visit company websiteJobs and hiring trendsPart-time
Senior · 7+ years experience
Remote
Apply faster on company sites with our extension.