• Own and evolve the company’s security strategy, ensuring it directly supports our GTM motion and customer trust requirements • Lead and manage a SecOps team of ~5, setting clear priorities, processes, and development plans • Drive and maintain SOC 2 and ISO 27001 compliance (and prepare for additional frameworks as needed, e.g., GDPR support, customer security reviews) • Act as the primary security partner for Sales, Customer Success, and Product—supporting security questionnaires, audits, and customer conversations • Design, implement, and monitor cloud infrastructure, applications, and internal systems • Lead incident response planning, tabletop exercises, and real-world response when needed • Own internal IT responsibilities as they arise, including identity/access management, endpoint security, tooling, and vendor relationships • Establish scalable policies, documentation, and risk management practices appropriate for a fast-growing startup • Stay pragmatic: balance strong security with speed, usability, and business impact