VP, Security

The role

Define and own Greenhouse’s security strategy, multi-year roadmap, operating model, budget, and investment priorities Lead a multidisciplinary security organization spanning product security, corporate security, and information security. Build it to be AI-native, using automation and agentic workflows to scale assessments, triage, investigations, and compliance evidence Build and develop a strong leadership bench, including hiring, coaching, succession planning, and career development Own Greenhouse’s security risk posture, including enterprise, third-party, and vendor risk, and risk acceptance decisions. Set risk appetite with the ELT and oversee compliance and assurance programs, including SOC 1, SOC 2, ISO 27001, ISO 27701, and ISO 42001 Lead security response for serious incidents, from detection and triage through executive, customer, regulatory, and post-incident communications Own annual disaster recovery exercises with Platform Engineering and regulatory notification timelines Establish governance for how AI is used across Greenhouse, by our people and in our product, including acceptable-use policies and standards, data handling, access boundaries, human oversight, and auditability Lead Greenhouse’s data security and governance program, including data classification, access controls, data loss prevention, and data residency, in partnership with Privacy and Legal Partner with Product, Engineering, IT, Legal, Privacy, and Finance on secure-by-default design, identity, and customer commitments Advise Sales and Customer Success on strategic security reviews and enterprise deals, and join customer trust conversations with CISOs and CTOs as needed Represent Greenhouse security with the Board, customers, prospects, partners, auditors, and industry audiences Lead security due diligence and integration for mergers and acquisitions