Head of Security

As the Head of Security at Super.com, you'll be our most senior and accountable security leader. You'll define and drive our security roadmap, staff and manage our security function, navigate our risks, ensure regulatory compliance, and help us deliver a safe and secure product to our customers. You'll report to our Senior Director of Infrastructure Engineering, and work closely with leaders across Legal, Data, Engineering, Product, Finance and HR while maintaining direct access to our executive team and board. This is a strategic and technical role that requires scaling your impact across AI tools, team leadership, cross-functional partnerships, and individual contributions.

Responsibilities

Define and drive the security roadmap; Staff and manage the security function; Navigate risks and ensure regulatory compliance; Help deliver a safe and secure product to customers; Lead hiring for engineers, GRC staff, and SOC partners; Manage reports ranging from junior IC to Staff and Director level, providing mentorship; Own OKR setting and broad strategic planning across Security related domains; Mature governance, risk, and compliance functions, including expanding the control framework with automated evidence, policy lifecycle, risk management, and managing privacy obligations in partnership with Legal; Champion an AI-first security program, directing the build-out of AI-native vulnerability management and detection tooling; Set the security culture through training, secure-by-default patterns, developer enablement, and clear expectations; Ensure customers are protected and the product is secure through tool selection, organization structure, and team focus; Provide technical direction and final say on security architecture across Engineering; Be accountable to the board for overall security posture and risk acceptance

Requirements

10+ years in security, including 4+ years leading a security function or major pillar, and experience managing managers/directors and senior technical leaders (Staff+); Owned company-level security strategy, budget, and outcomes end-to-end at a fast-paced technology company; Hands-on history in at least two of: application / product security, infra security, detection & incident response, enterprise IT & identity, and GRC; Proven success supporting fast-paced software development teams at scale; Stood up or scaled a GRC program: control frameworks, evidence automation, policy, and privacy program management. Experience with frameworks such as SOX, GDPR, PCI, SOC2, and/or ISO27001; Presented to and worked directly with a Board or Audit Committee, and with external auditors, regulators, or QSAs; Experience with security risk quantification, acceptance, and translating technical risk into business impact for executive decision-making; Strong track record hiring security professionals and developing engineers into technical and people leaders; Direct professional experience with and notable outcomes from driving AI transformation in security, engineering, and/or IT organizations

Benefits

Remote-First Flexibility: work from anywhere in the world and choose the hours that suit you best; Time to Recharge: unlimited PTO, company-wide recharge days, and annual team offsites; Everyday Perks: weekly UberEats credits and travel discounts on Super.com; Family-Friendly Benefits: generous parental leave and a flexible return-to-work plan; Comprehensive Compensation: competitive salary, equity options, and top-tier benefits starting on day one; Investing in You: access to wellness budgets, personal development funds, and team-level learning resources