Vice President, Information Security

As our Vice President, Information Security, you will step up as the de facto security leader owning Docebo's global security strategy across product, cloud, GRC, and AI. This is not an advisory tower role; you will operate at executive altitude while staying close to real architecture, engineering decisions, threat modeling, and control execution. You will drive hard, measurable risk reduction while pioneering AI-first security practices that empower our business to move fast with complete confidence. Our team spends three days a week in the office (Tuesday-Thursday).

Responsibilities

Own and evolve Docebo's enterprise security roadmap across product security, cloud hardening, GRC, privacy, and incident response to achieve measurable control maturity; Partner with Product and Engineering to integrate threat modeling, secure SDLC, CI/CD security, identity controls, and vulnerability remediation into core engineering workflows; Build governance and controls for AI products and internal tooling while harnessing AI to automate detection, vulnerability management, and threat response; Lead compliance programs (SOC 2, ISO 27001) backed by real controls and represent Docebo in board updates, audits, and enterprise customer due diligence; Strengthen security telemetry, threat intelligence, and detection across cloud and corporate environments; Lead and coach a security team, building a high-accountability culture focused on clear outcomes, rapid execution, and continuous learning

Requirements

Significant experience leading information security programs in a software, SaaS, or tech product environment with a track record of executive and board collaboration; Hands-on mastery of application security, cloud security (AWS), infrastructure, identity systems, secure SDLC, and modern vulnerability management; Active CISSP credential backed by a deep understanding of SOC 2, ISO 27001, privacy regulations, and enterprise SaaS security standards; Exceptional ability to forge trusted partnerships across Product, Engineering, Legal, and Sales; A clear track record of using metrics and business risk language to make decisive, risk-informed choices in complex, ambiguous environments

Nice to have

Hands-on experience securing AI-enabled products and LLMs, or utilizing AI tools to scale security operations and automated testing; Additional credentials such as CISM, CISA, CCSP, AWS Security Specialty, or GIAC, combined with offensive security or red teaming experience; Proven experience navigating FedRAMP standards, public-sector requirements, and high-growth global SaaS expansion

Benefits

Employee Share Purchase Plan (ESPP) at a 15% discount; Competitive compensation package; Health benefits; Paid vacation days; Two company-wide Docebo Days; Floating holidays for cultural celebrations; Birthday off; Family-related time off; Employee Resource Groups and company-wide events