Director, Information Security

PubMatic•Redwood City, CA

1d•$210,000 - $250,000•Hybrid

About The Position

PubMatic is seeking a Director of Information Security to lead and evolve our global security program across enterprise infrastructure, cloud platforms, products, corporate systems, and emerging AI technologies. This role requires strong executive communication skills, the ability to design and roll out security controls that protect the organization without slowing people down, and a working knowledge of AI-powered security tooling and emerging AI-specific risks. The Director will translate complex security concepts into clear, decision-ready narratives for leadership, auditors, and regulators, balancing risk posture with operational velocity and managing change adoption across technical and non-technical teams.

Requirements

Bachelor’s degree or higher in Computer Science, Cybersecurity, Engineering, or related field.
10+ years of progressive cybersecurity experience with at least 5 years leading enterprise security organizations.
Strong expertise in cloud security, Security Engineering, Security Operations, IAM, Zero Trust, DevSecOps, Kubernetes, network security, and modern enterprise security architectures.
Experience leading enterprise-wide security transformation and implementing automation to improve security operations.
Working knowledge of AI-powered security technologies for automation, threat detection, incident triage, and operational efficiency.
Strong understanding of AI security risks, including LLM security, prompt injection, AI governance, and secure enterprise AI adoption.
Proven ability to design security programs that effectively balance risk reduction with employee productivity, developer experience, and business velocity.
Demonstrated success leading large-scale security initiatives with thoughtful rollout strategies, change management, and user adoption planning.
Exceptional executive presence with outstanding written, verbal, and presentation skills, including the ability to communicate effectively with executives, board members, customers, auditors, and regulators.
Ability to translate complex technical and security topics into concise, business-focused, decision-ready recommendations tailored to different audiences.
High attention to detail and a strong sense of executive communication quality and presentation excellence.

Nice To Haves

CISSP, CISM, CCSP, or equivalent certifications are preferred.

Responsibilities

Define and execute PubMatic's enterprise information security strategy and multi-year roadmap.
Lead Security Engineering, Security Operations, Governance, and Incident Response.
Build a highly automated, AI-enabled security organization focused on excellence and operational efficiency.
Establish executive security metrics, KPIs, and reporting for senior leadership and the Board.
Manage a team of security engineers, security investments, vendor relationships, and strategic security initiatives.
Lead security architecture across cloud infrastructure, enterprise platforms, products, identity, networks, Kubernetes, endpoints, and data protection.
Drive security automation, threat detection, vulnerability management, incident response, and continuous improvement.
Partner with engineering teams to embed security by design throughout the software development lifecycle.
Build reusable security platforms, self-service capabilities, APIs, and automation that enable developers while reducing operational overhead.
Develop and execute the company's AI security strategy and governance framework, with a security focus.
Secure enterprise AI platforms, AI infrastructure, and AI-enabled applications.
Leverage AI-powered technologies to improve threat detection, incident response, security operations, and overall operational efficiency.
Guide the organization on secure adoption of Generative AI while addressing emerging risks such as prompt injection, data leakage, model abuse, and AI-specific attack vectors.
Maintain enterprise security governance in partnership with compliance and privacy teams, and third-party security programs.
Partner with business leaders to balance security, regulatory requirements, employee productivity, and business agility.
Lead security awareness initiatives that promote secure development and responsible AI adoption across the organization.