Director of Information Security
- Role
- Security
- Experience
- Lead
- Employment
- Full-time
- Company size
- Mid-size
Open to HR only. Set where you work from to check your eligibility.
No BS summary
Director of Information Security needed to own Constructor's security program end-to-end. Requires 5+ years in information security (2+ in leadership) and 2+ years in DevOps/Platform Engineering. Must be proficient with AI tools, compliance frameworks (SOC 2, ISO 27001, GDPR, CCPA), incident response in SaaS/cloud, and customer-facing engagements. Excellent English communication and ability to work independently remotely are essential.
Core skills
Required skills
Optional skills
Required languages
Customer Stories
How Petco drove a 13% lift in ecommerce conversions with Constructor
“The thing we liked about Constructor was that not only was it real AI, specifically made for our industry, but that their AI is incredibly transparent. None of it is black box – so we don't have to guess what it's doing or why – and when we have questions, the Constructor team is always happy to talk us through it. We evaluated every vendor on the market, and Constructor was just different. The system is easy to use, the team is motivated and delightful to work with, and most importantly, it paid for itself plus the cost of switching in less than a year after we implemented it."
Tony Gabriele
VP Digital Strategy, Petco
Read the Full Story
Learn about The Very Group's journey to a composable, next-generation ecommerce experience with Constructor
“What we loved about Constructor was the fact that it’s built on true glassbox AI that will merchandise our product catalog and our product categories for us, and will do it in a way that helps us to understand why it’s made the choices it's made, gives our human beings the opportunity to intervene when we think there’s a real need, all while creating an ecosystem where we can work with Constructor to challenge the algorithm and continue to tweak and evolve it.”
Paul Hornby
Digital Customer Experience Director, The Very Group
Watch the Interview
How Petco drove a 13% lift in ecommerce conversions with Constructor
“The thing we liked about Constructor was that not only was it real AI, specifically made for our industry, but that their AI is incredibly transparent. None of it is black box – so we don't have to guess what it's doing or why – and when we have questions, the Constructor team is always happy to talk us through it. We evaluated every vendor on the market, and Constructor was just different. The system is easy to use, the team is motivated and delightful to work with, and most importantly, it paid for itself plus the cost of switching in less than a year after we implemented it."
Tony Gabriele
VP Digital Strategy, Petco
Read the Full Story
Learn about The Very Group's journey to a composable, next-generation ecommerce experience with Constructor
“What we loved about Constructor was the fact that it’s built on true glassbox AI that will merchandise our product catalog and our product categories for us, and will do it in a way that helps us to understand why it’s made the choices it's made, gives our human beings the opportunity to intervene when we think there’s a real need, all while creating an ecosystem where we can work with Constructor to challenge the algorithm and continue to tweak and evolve it.”
Paul Hornby
Digital Customer Experience Director, The Very Group
Watch the Interview
How Petco drove a 13% lift in ecommerce conversions with Constructor
“The thing we liked about Constructor was that not only was it real AI, specifically made for our industry, but that their AI is incredibly transparent. None of it is black box – so we don't have to guess what it's doing or why – and when we have questions, the Constructor team is always happy to talk us through it. We evaluated every vendor on the market, and Constructor was just different. The system is easy to use, the team is motivated and delightful to work with, and most importantly, it paid for itself plus the cost of switching in less than a year after we implemented it."
Tony Gabriele
VP Digital Strategy, Petco
Read the Full Story
Learn about The Very Group's journey to a composable, next-generation ecommerce experience with Constructor
“What we loved about Constructor was the fact that it’s built on true glassbox AI that will merchandise our product catalog and our product categories for us, and will do it in a way that helps us to understand why it’s made the choices it's made, gives our human beings the opportunity to intervene when we think there’s a real need, all while creating an ecosystem where we can work with Constructor to challenge the algorithm and continue to tweak and evolve it.”
Paul Hornby
Digital Customer Experience Director, The Very Group
Watch the Interview
How Petco drove a 13% lift in ecommerce conversions with Constructor
“The thing we liked about Constructor was that not only was it real AI, specifically made for our industry, but that their AI is incredibly transparent. None of it is black box – so we don't have to guess what it's doing or why – and when we have questions, the Constructor team is always happy to talk us through it. We evaluated every vendor on the market, and Constructor was just different. The system is easy to use, the team is motivated and delightful to work with, and most importantly, it paid for itself plus the cost of switching in less than a year after we implemented it."
Tony Gabriele
VP Digital Strategy, Petco
Read the Full Story
Learn about The Very Group's journey to a composable, next-generation ecommerce experience with Constructor
“What we loved about Constructor was the fact that it’s built on true glassbox AI that will merchandise our product catalog and our product categories for us, and will do it in a way that helps us to understand why it’s made the choices it's made, gives our human beings the opportunity to intervene when we think there’s a real need, all while creating an ecosystem where we can work with Constructor to challenge the algorithm and continue to tweak and evolve it.”
Paul Hornby
Digital Customer Experience Director, The Very Group
Watch the Interview
What you'll do
- Answer prospect security questions, review and finalize security questionnaires, and meet directly with prospects and customers to represent Constructor's security posture
- Own SOC 2 Type II and ISO 27001 certification programs, manage external auditors, maintain controls, and ensure continuous compliance
- Own all security incidents from detection through resolution and post-mortem; maintain and improve the incident response plan
- Conduct ongoing risk assessments, maintain the risk register, and present risk posture to leadership and the board
- Run quarterly access reviews across all systems; ensure least-privilege principles are enforced
- Field "Can I use this?" questions from employees evaluating new tools, vendors, and workflows
- Define and maintain guardrails for internal AI use, balancing productivity with data protection
- Plan and execute tabletop exercises, simulated incidents, and red/purple team engagements
- Oversee the data loss prevention program, triage alerts, and refine policies
- Review third-party vendor security posture and manage the vendor risk assessment process
- Maintain the employee security training program and foster a security-conscious culture
- Collaborate with Platform Engineering on cloud security posture (AWS), container security, and vulnerability management
What they require
- 5+ years of experience in information security, with at least 2 years in a senior or leadership role
- 2+ years hands-on experience in a DevOps or Platform Engineering role
- Proficiency with AI tools like Claude Code
- Deep familiarity with compliance frameworks (SOC 2, ISO 27001, GDPR, CCPA)
- Experience owning incident response end-to-end in a SaaS or cloud-native environment
- Comfortable in customer-facing settings — you can clearly articulate security posture to enterprise prospects
- Hands-on experience with identity management (Okta or similar), MDM, DLP, and cloud security tooling
- Strong understanding of application security in a modern stack
- Excellent English written communication — you'll author policies, questionnaire responses, and board-level summaries
- Ability to operate independently with minimal oversight in a fully remote culture
Benefits
- Unlimited vacation time -we strongly encourage all of our employees take at least 3 weeks per year
- A competitive compensation package including stock options
- Fully remote team - choose where you live
- Work from home stipend! We want you to have the resources you need to set up your home office
- Apple laptops provided for new employees
- Training and development budget for every employee, refreshed each year
- Parental leave for qualified employees
- Work with smart people who will help you grow and make a meaningful impact
Constructor.io is an AI-first e-commerce search and discovery platform that helps shoppers find the right products at the right time and enables leading global e-commerce brands to drive meaningful revenue and conversion gains.
What people say about this company
4.3/ 5
- Employees appreciate the supportive work culture.
- Many reviews mention good work-life balance.
- Positive team dynamics and collaboration are frequently noted.