Director of Information Security

About This Opportunity

We are representing a confidential SaaS organization seeking a Director of Information Security to lead their security program end-to-end. Reporting to the CIO, you will serve as the senior security leader responsible for protecting the platform, customer data, and internal operations. This is a high-autonomy role where you will shape strategy and execute hands-on in a lean, engineering-driven environment.

This is a fully remote position open to candidates across the EMEA region, with a preference for those based in Croatia or elsewhere in Europe.

Responsibilities

• Customer trust and sales enablement: Answer prospect security questions, finalize security questionnaires, and represent the organization's security posture in direct meetings with prospects and customers
• Compliance and audit: Own SOC 2 Type II and ISO 27001 certification programs, manage external auditors, maintain controls, and ensure continuous compliance
• Incident response: Own all security incidents from detection through resolution and post-mortem; maintain and improve the incident response plan
• Risk management: Conduct ongoing risk assessments, maintain the risk register, and present risk posture to leadership and the board
• Access governance: Run quarterly access reviews across all systems and ensure least-privilege principles are enforced
• Internal advisory: Field employee questions on new tools, vendors, and workflows from a security perspective
• AI governance: Define and maintain guardrails for internal AI use, balancing productivity with data protection
• Security exercises: Plan and execute tabletop exercises, simulated incidents, and red/purple team engagements
• DLP and insider threat: Oversee the data loss prevention program, triage alerts, and refine policies
• Vendor security: Review third-party vendor security posture and manage the vendor risk assessment process
• Security awareness: Maintain the employee security training program and foster a security-conscious culture
• Infrastructure security partnership: Collaborate with Platform Engineering on cloud security posture (AWS), container security, and vulnerability management

What We're Looking For

• 5+ years of experience in information security, with at least 2 years in a senior or leadership role
• 2+ years hands-on experience in a DevOps or Platform Engineering role
• Proficiency with AI tools like Claude Code
• Deep familiarity with compliance frameworks including SOC 2, ISO 27001, GDPR, and CCPA
• Experience owning incident response end-to-end in a SaaS or cloud-native environment
• Comfortable in customer-facing settings with the ability to clearly articulate security posture to enterprise prospects
• Hands-on experience with identity management (Okta or similar), MDM, DLP, and cloud security tooling
• Strong understanding of application security in a modern stack
• Excellent English written communication skills for authoring policies, questionnaire responses, and board-level summaries
• Ability to operate independently with minimal oversight in a fully remote culture
• Based in Europe, ideally Croatia or a nearby time zone

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will conduct an initial screening to understand your background and fit for the role. Once screened, we will submit your profile to our client for consideration. Please do not attempt to contact the client organization directly, as all communication is managed through our recruiting process.

Pay

Compensation details will be discussed during the screening process based on experience and location.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome candidates of all backgrounds and encourage applications from individuals who may not meet every listed qualification but bring relevant skills and experience to the role.