VP, Information Security

Strength in Trust  

At OneTrust, we exist to unlock every company's potential to thrive by doing what's good for people and planet. Using cutting-edge technology and a real-world approach to privacy, GRC, ethics, and ESG, we’ve created a no-nonsense platform to help supercharge the global push for Trust Intelligence. 

The Challenge

As a cloud only SaaS platform, product security is at the forefront of what we do. We strive to build products that are Secure by Design. The VP Security is responsible for day-to-day operations to support and augment the CISO’s overall responsibilities. This position requires strong written and oral communication skills, as well as the ability to communicate detailed technical information in a manner comprehensible by individuals at varying degrees of experience and skill. The role requires the ability to speak confidently in front of large groups and with senior management, vendors and service providers. The VP Security provides leadership and contributes to the IT security strategy and roadmap. Strong program, people and project management skills are required.

Your Mission

• Responsible for day-to-day operations to support and augment the CISO’s overall responsibilities
• Act as the functional backup to OneTrust's Chief Information Security Officer
• Build a growing team of cross functional information security and operations professionals to ensure security issues in our products are detected early and remediated quickly
• Work directly with business units to facilitate risk assessment and risk management processes
• Understand and interacts with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
• Develops, implements, and monitors strategic, comprehensive enterprise information security and IT risk management programs
• Partner with stakeholders across the company to raise awareness of risk management concerns
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems
• Lead risk remediation analysis and activities identified by internal and external audits
• Broadly apply security principles, theories, and concepts to job assignments. Solves a diverse range of complex problems working with limited direction
• Development of information security strategies and roadmaps based on risk management practices aligning to business needs
• Partner with Product Teams to understand initiatives and roadmaps to proactively align security with the business
• Identify opportunities to improve, evangelize, and embed security standards and processes into existing processes to ensure standardization of project implementation
• Work cross-functionally with Core Teams to apply end-to-end security within the enterprise environment, software development lifecycle, including Cyber Threat Intelligence, IAM, networking, storage, databases, logging, and CI/CD pipelines
• Proactively assess and identify information security risk, effectively communicating findings, and follow established risk management processes
• Document detailed security needs and baselines for current and future enterprise environments
• Track and share emerging security practices and standards by participating in educational opportunities, reading professional publications, and participating in professional organizations

You Are

• Technology oriented: You may not be the only hands involved in a project, but you don’t mind getting involved and have deep understanding of current trends and technologies
• A Relationship builder: Ability to listen, build rapport, and credibility as a strategic partner vertically within the business unit, as well as with leadership and functional teams
• A Strategic thinker: Ability to map joint organizational vision and long-term thinking, imagination, and idea generation
• Detail oriented with an eye for quality
• In possession of a college BS/BA degree, progressive educational certificate, or equivalent
• Experienced: 15+ years of experience in Information Security, Enterprise Architecture, or Product Engineering/Management, and 6+ years' experience leading and managing a team

Extra Awesome

• BA/BS in Computer Science, Engineering, Math or related subject
• 15+ years of hands-on information security; security-related cloud operations
• Security standard methodologies and concepts
• Preferred certifications: CISSP, CCSP, SSCP, etc.
• Microsoft Azure experience preferred
• Critical thinking, problem-solving, and decision-making capabilities
• Strong visionary skills to excel in a complex and rapidly evolving environment 

Resources 

Check out the following to learn more about this role:  

• What is OneTrust? (Video) 
• Working at OneTrust (Video) 
• Your Ultimate Guide to Careers at OneTrust (Blog) 
• @LifeatOneTrust on Instagram 

Benefits

As an employee at OneTrust, you will be a part of the OneTeam. That means equity, bonuses, unlimited PTO, and 100% paid medical benefits (and that’s just the beginning!).  

Our employee rewards philosophy spans mental, physical, and emotional well-being because we want our people to succeed both in and out of the office. Some benefits differ depending on region, but here’s what you can expect from our OneTeam Total Rewards Program: 

• Competitive Compensation: We offer top pay for top talent with competitive total packages including equity for all, performance bonuses, and retirement savings with match. We’re also committed to fair and equitable pay practices. 
• Workstyle Flexibility: At home or in the office, we trust you to get the job done. Our people have the option to work in the office, fully remote, or a hybrid based on their role. Go green with commuter program discounts and in-office perks.  
• Career Development: You’re not just joining any company; you’re joining the company that built the category-defining software platform for trust. You can become an expert and earn industry certifications with training and exams paid for by us and access to our learning & development program and guest speaker series.  
• Employee Recognition: We celebrate our accomplishments the best way we know how – together. Our people are invited to attend employee appreciation social events (including our awesome annual holiday party), participate in ticket giveaways for local city events based on your home office location, and celebrate one another through our #CheersforPeers channel. 
• Focus on Wellbeing: Take the vacation or volunteer - we have unlimited PTO globally. You’ll also have access to ClassPass memberships, generous company holidays and your birthday off, paid sick days, Employee Resource Groups (or, as we call them, Employee Trust Groups), and other ways to get connected or support company diversity, equity, and inclusion goals.  
• Health Benefits: No package is complete without great health benefits. This role may receive company-paid employee healthcare premiums, parental leave, and access to mental health benefits and employee assistance programs. Specific benefits differ by location, so please check with your recruiter to specify what this role will receive. 

Our Commitment to You

When you join OneTrust you are stepping onto a launching pad — the countdown has begun. The destination? A career without boundaries working alongside a diverse and inclusive crew who is passionate about doing meaningful work. As a pioneer, your voice and expertise will help chart the direction of an entirely new industry — Trust. Our commitment to putting people first starts with you. Your growth is part of the mission. Our goal is to give you the power to embark on the next phase of your uniquely, unique career.

OneTrust provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.