Director of Security & IT Operations

Pilot.com•San Francisco, CA

2d•Remote

About The Position

The Role Pilot is looking for a Director of Security to establish a world-class security program that protects our customers’ financial data and ensures our internal systems remain secure and resilient. As an established and growing startup that serves thousands of customers, we handle highly sensitive financial information every day to deliver a high quality service to our customers. In this role, you will set the vision, define the strategy, and lead the execution of all things security—including application security, cybersecurity detection and response, corporate IT cloud infrastructure, and business technology systems. Your work will enable a secure, seamless financial experience for our customers and employees and uphold our commitment to trust and integrity. You’ll also collaborate closely with other executives to shape the future of security at Pilot. This is a unique opportunity to blend hands-on technical expertise with strategic leadership , building a team and culture of security from the ground up. We are looking for a passionate, experienced security leader who’s excited to jump in at all levels of the stack. If you’re passionate about safeguarding critical financial data and excited to grow and mentor a security function in a fast-paced environment, we want to hear from you!

Requirements

8+ years in security roles, with at least 3–5 years leading security programs or teams in a dynamic environment.
Experience at a fast-growing startup or tech company is strongly preferred.
Comfortable building and advocating for a company-wide security strategy alongside diving into the day to day work of keeping a company secure.
Ability to explain complex security concepts to both technical and non-technical stakeholders.
Excited to grow and retain top-tier security talent, and thrive on seeing others develop their skills.
Thrive in an environment where you can move fast, adapt quickly, and create processes from scratch.
Resourceful, autonomous, and know how to balance security best practices with business needs.

Nice To Haves

AI-specific security strategy and considerations
Hands-on security implementation

Responsibilities

Develop and implement an end-to-end security roadmap that aligns with Pilot’s priorities, risk profile, and compliance needs
Oversee threat assessments, vulnerability scans, and remediation efforts across our cloud infrastructure and corporate IT systems.
Oversee core security controls (e.g., MFA, SSO, endpoint protection, identity & access management).
Ownership over security compliance programs. Guidance for any necessary audits and ongoing certifications (e.g. SOC 2 Type II).
Partnership with legal team to ensure we meet all regulatory and contractual security requirements.
Evaluation of proactive security programs such as regular penetration tests
Develop and roll out security awareness training programs to educate employees on cybersecurity best practices (phishing prevention, data handling, etc.).
Provide guidance and training to developers on secure coding.
Foster an environment where employees value and prioritize protecting customer data.
Work closely with product and engineering teams to embed security into product design and development.
Responsible for end-to-end IT function: managing physical hardware, SaaS application configuration and IT systems engineering
Oversight over IT systems: Okta and SaaS integrations
Ownership and support of Pilot’s business systems needs