CISO

Glean•Mountain View, CA

5d•$424,300 - $489,400•Hybrid

About The Position

Glean is seeking a Chief Information Security Officer to lead security for the company and its core product. Reporting to the CTO, the CISO will set the security strategy and operating model across product and platform security, corporate security, detection and response, risk, and compliance, translating strategy into measurable risk reduction. This executive role requires technical judgment, organizational leadership, and the ability to make sound security decisions at the pace of an AI company. The CISO will partner with Engineering, Product, Legal, IT, and company leadership to build security into products and operations, oversee corporate security, improve incident readiness, and own risk management, compliance strategy, audit readiness, and control effectiveness. The role also includes building and developing a high-performing multidisciplinary security team and enabling practical, informed risk decisions across the company. The position is hybrid, with four days per week in Glean’s San Francisco Bay Area office.

Requirements

Senior security leadership experience with accountability for a broad, enterprise-scale security program at a high-growth technology or product company.
Strong technical depth across product and application security, cloud and infrastructure security, identity and access management, secure development, and vulnerability management.
Ability to engage credibly with senior engineers on architecture and remediation choices.
Experience building and operating effective security, detection, and incident-response programs, including leading through high-severity incidents and ensuring lessons result in durable improvements.
Practical expertise in security risk management, governance, compliance, and audit readiness, with sound judgment distinguishing control completion from actual risk reduction.
Track record of partnering with Product and Engineering to ship secure products and embed security in fast-moving development organizations.
Experience building, leading, and retaining multidisciplinary teams; setting priorities; allocating resources; and creating clear accountability across teams.
Excellent executive communication and judgment, including the ability to explain technical issues and uncertainty plainly, recommend a path forward, and escalate material risk at the right time.
Collaborative, pragmatic leadership style that earns trust while maintaining a high bar for security outcomes.

Nice To Haves

Experience as a CISO, deputy CISO, or senior security executive is strongly preferred.
Experience securing enterprise AI, machine-learning, LLM, or agentic systems, including data handling, model and application boundaries, tool access, and adversarial testing.
Experience using automation or AI-enabled techniques to improve security analysis, detection, investigation, or remediation.
Experience supporting regulated customers or programs such as FedRAMP.
Experience preparing a company for public-company or IPO-level governance and disclosure expectations.

Responsibilities

Set a risk-based security strategy, priorities, policies, metrics, and decision-making mechanisms that scale with the business.
Give executives clear visibility into material risks, remediation progress, and decisions requiring business ownership; establish an operating cadence to ensure risks are visible, owned, prioritized, and reduced.
Partner with Engineering and Product to incorporate security into architecture, design, development, release, and operations.
Guide security across application and platform layers, identity and authorization, customer-data flows, cloud environments, integrations, and AI-enabled capabilities, including models, agents, and the tools and data they can access.
Lead a measurable vulnerability-management and secure-development program covering threat modeling, code and dependency risk, software supply-chain security, penetration testing, bug bounty, remediation ownership, and validation.
Use automation and AI-assisted analysis to increase security coverage and shorten time to fix.
Oversee security for corporate systems, identity, endpoints, SaaS applications, cloud infrastructure, and privileged access.
Partner with IT and technical owners to improve preventive controls, monitoring, and operational resilience.
Ensure the organization can detect, assess, contain, recover from, and learn from security incidents.
Clarify incident escalation and decision paths; coordinate with Engineering, Legal, Privacy, Communications, and business leaders; and ensure corrective actions are completed and validated.
Own security risk management, compliance strategy, audit readiness, and control effectiveness; support frameworks and customer or regulatory requirements relevant to the business.
Track outcomes in risk reduction, vulnerability remediation, incident readiness, and control effectiveness.
Build and grow a high-performing team across security engineering, enterprise security, detection and response, and governance; establish ownership, develop leaders, and foster focus and accountability.
Build strong working relationships across the company and help teams understand practical safeguards and make informed risk decisions.
Partner with customer-facing security leaders on escalations and assurance needs.
Contribute security expertise to commercial security products in partnership with their Product and business owners; those teams retain ownership of their product roadmaps.