Chief Information Security Officer
Twilio
·
Posted:
August 25, 2023
·
Remote
About the position
Twilio is seeking a Chief Information Security Officer to drive the company's overall security strategy and protect its corporate, employee, and customer data. The CISO will lead a team of information security professionals, implement security programs and technologies, and ensure compliance with company policies and regulatory requirements. The ideal candidate is a security thought leader, a strong leader and builder of teams, and a clear and concise communicator. They should have prior experience as a CISO, extensive experience in information security leadership, and expertise in areas such as product security, cloud security, incident response, and risk assessments.
Responsibilities
- Serve as the lead for information security for Twilio
- Review and assess the maturity of current security programs and capabilities
- Create a multi-year strategic security roadmap
- Advise and implement security technologies into a modern DevOps organization
- Translate technical risks into interpretable organizational risks for corporate audiences
- Coordinate the security strategy among different company departments
- Prioritize compliance expertise for industry frameworks
- Serve as a security advocate and authority
- Set up security-focused metrics and accountability measures
- Connect with the security industry to hire great talent and build a world-class team
Requirements
- Prior experience as a CISO, preferably of a public company
- Minimum 15 years of experience as an information security leader with a large security team, at a consumer-technology or enterprise software company
- 10-12+ years of relevant work experience across modern engineering/product teams or within the technology organization
- Proven track record implementing programs such as product security, Cloud security, incident response, threat intelligence, DLP/DR/BCP, IAM, information privacy, SOC management, security architecture, security policy/advocacy, and risk assessments
- Relevant compliance expertise for the industry, and familiarity with/certifications for frameworks including ISO, SOX, SOC2, NIST, SSAE, PCI, FedRAMP
- Technical foundation (EE/CS degree), but also a business mentality and a dedication to translating technical vulnerabilities into broader organizational risks for senior leadership
- Superior written and verbal communication skills. Ability to serve broadly as a security advocate and authority
- Demonstrated experience in setting up security-focused metrics and accountability measures across an enterprise
- Security industry connectivity to hire great talent and build a world-class team. Serve as an external security evangelist for the company
- Prior experience as a CISO for a publicly traded technology company (desired)
- Cloud security and Dev Ops expertise is highly relevant (desired)
Benefits
- Competitive pay
- Generous time-off
- Ample parental and wellness leave
- Healthcare
- Retirement savings program
- Support for volunteering and donation efforts
- Opportunity to unleash full potential and do best work
- Opportunity to be the best version of oneself
- Opportunity to build positive change in communities
- Health care insurance
- 401(k) retirement account
- Paid sick time
- Paid personal time off
- Paid parental leave
- Equal employment opportunity
- Reasonable accommodations for individuals with disabilities and disabled veterans