Chief Information & Security Officer

Nextdoor • Dallas, TX

3d • $260,000 - $340,000

About The Position

Nextdoor’s Chief Information and Security Officer owns enterprise and product security and oversees corporate IT and internal business systems, working closely with Engineering and experienced leaders in those areas. The role protects Nextdoor, its data, and its platform, and reports to the Chief Financial Officer. The position is based in Dallas, TX.

The CISO leads Nextdoor’s end-to-end security program, including security strategy, policies, risk assessments, employee training, application and cloud security, threat monitoring, incident response, privacy protections, security vendors, and audit and compliance work. The role sets platform security standards and partners with Engineering to embed security in software design, development, and release.

The role also oversees business systems including Workday and Salesforce, and corporate IT operations such as identity and access management, device management, Google Workspace, Slack, IT asset management, and helpdesk. It sets the security approach for employee AI tools and oversees their spend and adoption.

The CISO sets strategy, roadmaps, and OKRs for security, IT, and business systems; leads and develops a high-performing technology team; manages IT budgets and software spend; and assesses emerging threats and technology trends. The expected starting salary is $260,000–$340,000 annually, potentially higher depending on the candidate’s proficiency and geographic location. The role is expected to receive an equity grant.

Requirements

• 10+ years of experience in security, including several years leading security teams.
• Experience building and leading a security team, including application security engineers and outside providers.
• Deep, hands-on experience running security programs for both a corporate environment and a consumer-scale product, including application security, cloud infrastructure security, and secure software development.
• Track record of working with Engineering teams to fix vulnerabilities and change software development practices without slowing delivery.
• Experience leading the response to a real security incident, including working with outside responders, Legal, and Communications.
• Experience securing a public company or another SOX-regulated environment, with familiarity with SOC 2 or ISO 27001 audits and vendor security reviews.
• Working knowledge of endpoint detection and response, security monitoring, and identity and access management tools; Nextdoor uses Okta.
• Familiarity with rolling out AI tools across a company and measuring adoption and spend.
• Experience driving cross-team change while aligning diverse stakeholders.
• Strong leadership and interpersonal skills, with an emphasis on mentoring and coaching team members.

Nice To Haves

• Security certification such as CISSP or CISM.
• Experience connecting business systems with integration platforms such as Workato, MuleSoft, or Zapier, and building or governing automated AI workflows with human oversight.
• Strong technical and functional background in ERP and CRM systems, and hands-on experience with Jamf, Okta, Google Workspace, Slack, Salesforce, Workday, Glean, and Workato.
• Experience leading or partnering with business systems teams.
• Experience in IT and business systems is preferred.

Responsibilities

• Own Nextdoor’s security program, including strategy, policies, risk assessments, employee training, and a roadmap tied to key company risks.
• Report security risks to the executive team and the Audit & Risk committee of the Board, and work with Legal on assessment and disclosure of material incidents.
• Set security standards for the platform, including mobile apps, web, APIs, and cloud infrastructure, and partner with Engineering to incorporate security into software design, development, and release.
• Run application security activities, including code review, dependency scanning, penetration testing, vulnerability management, and a responsible disclosure or bug bounty program.
• Lead security reviews of new products, features, and third-party code.
• Protect member and customer data through encryption, access controls, and monitoring, and work with Legal on privacy requirements in countries where Nextdoor operates.
• Run threat detection and monitoring across devices, cloud, the platform, and business systems, using outside providers where needed.
• Maintain and test an incident response plan, including for product data breaches, and conduct regular exercises with Engineering and Legal.
• Secure corporate and business systems, including devices, logins, email, Slack, and systems containing customer and financial data; assess and manage security vendors and third-party providers.
• Lead security audit and compliance work, including SOX, IT general controls, SOC 2, and ISO 27001, in partnership with Internal Audit.
• Oversee the teams responsible for Workday (ERP and HCM) and Salesforce (Sales & Service Cloud).
• Partner with business systems leaders to integrate and automate systems across Finance, People, Customer Operations, and Revenue Operations.
• Oversee corporate IT operations, including Okta identity and access, Jamf device management, Google Workspace, Slack, IT asset management, and helpdesk.
• Set the security approach for employee AI tools, including approved tools and protections for company data.
• Oversee AI tool spend and adoption.
• Set strategy, roadmaps, and OKRs for security, IT, and business systems, aligning them with company priorities and stakeholders.
• Lead, mentor, and develop a high-performing technology team.
• Manage the IT budget and software spend, including forecasting, vendor management, and contract negotiation.
• Monitor emerging threats and technology trends and assess their potential business impact.

Benefits

• A choice of health plans, including an employee-only plan option covered at 100%.
• OneMedical membership for concierge care.
• Meaningful equity grant, with quarterly vesting and the first vest date within three months of the start date.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Education Level: No Education Listed