CISO

Glean•Mountain View, CA

5d•$424,300 - $489,400•Hybrid

About The Position

Glean is seeking a Chief Information Security Officer (CISO) to lead security for the company and its core product. Reporting to the CTO, this executive will set the security strategy and operating model across product and platform security, corporate security, detection and response, risk, and compliance, translating strategy into measurable risk reduction. The CISO will combine technical judgment with organizational leadership, partnering closely with Engineering, Product, Legal, IT, and company leadership to make sound security decisions at the pace of an AI company. The role requires the ability to engage deeply with architecture and incidents, build a durable security program, and communicate clearly about risk and trade-offs. The position is hybrid, with four days a week in Glean’s San Francisco Bay Area office. The standard base salary range is $424,300–$489,400 annually. Compensation may vary based on location, level, job-related knowledge, skills, and experience; certain roles may also be eligible for variable compensation, equity, and benefits.

Requirements

Senior security leadership experience with accountability for a broad, enterprise-scale security program at a high-growth technology or product company.
Experience as a CISO, deputy CISO, or senior security executive is strongly preferred.
Strong technical depth across product and application security, cloud and infrastructure security, identity and access management, secure development, and vulnerability management; ability to engage credibly with senior engineers on architecture and remediation choices.
Experience building and operating effective security, detection, and incident-response programs, including leading through high-severity incidents and ensuring lessons result in durable improvements.
Practical expertise in security risk management, governance, compliance, and audit readiness, with judgment to distinguish control completion from actual risk reduction.
Track record of partnering with Product and Engineering to ship secure products and embed security in fast-moving development organizations.
Experience building, leading, and retaining strong multidisciplinary teams; setting priorities, allocating resources, and creating clear accountability across teams.
Excellent executive communication and judgment; ability to explain technical issues and uncertainty plainly, recommend a path forward, and escalate material risk at the right time.
Collaborative, pragmatic leadership style that earns trust while maintaining a high bar for security outcomes.

Nice To Haves

Experience securing enterprise AI, machine-learning, LLM, or agentic systems, including data handling, model and application boundaries, tool access, and adversarial testing.
Experience using automation or AI-enabled techniques to improve security analysis, detection, investigation, or remediation.
Experience supporting regulated customers or programs such as FedRAMP.
Experience preparing a company for public-company or IPO-level governance and disclosure expectations.

Responsibilities

Set a risk-based security strategy, priorities, policies, metrics, and decision-making mechanisms that scale with the business; provide executives clear visibility into material risks, remediation progress, and decisions requiring business ownership.
Partner with Engineering and Product to build security into architecture, design, development, release, and operations across application and platform layers, identity and authorization, customer-data flows, cloud environments, integrations, and AI-enabled capabilities.
Lead a measurable vulnerability-management and secure-development program covering threat modeling, code and dependency risk, software supply-chain security, penetration testing, bug bounty, remediation ownership, and validation; use automation and AI-assisted analysis thoughtfully to increase coverage and shorten time to fix.
Oversee security for corporate systems, identity, endpoints, SaaS applications, cloud infrastructure, and privileged access, partnering with IT and technical owners to improve preventive controls, monitoring, and operational resilience.
Ensure the organization can detect, assess, contain, recover from, and learn from security incidents; clarify escalation and decision paths, coordinate with relevant functions and leaders, and ensure corrective actions are completed and validated.
Own security risk management, compliance strategy, audit readiness, and control effectiveness; support relevant frameworks and customer or regulatory requirements, and track outcomes in risk reduction, vulnerability remediation, incident readiness, and control effectiveness.
Build and grow a high-performing team across security engineering, enterprise security, detection and response, and governance; establish ownership, develop technical and people leaders, and promote focus and accountability.
Build strong working relationships across the company, helping teams understand practical safeguards and make informed risk decisions. Partner with customer-facing security leaders on escalations and assurance needs.
Contribute security expertise to commercial security products in partnership with their Product and business owners; those teams retain ownership of their product roadmaps.