Director of Security

Arrive Logistics•Austin, TX

4d•Onsite

About The Position

Arrive Logistics is hiring its senior-most security leader to own security strategy, operations, and audit readiness. Reporting directly to the VP of Enterprise IT, the Director of Security will run security day to day, oversee the managed detection and response (MDR) relationship and security tools, and serve as the face of security across the company. The role will help strengthen the audit function and prepare Arrive for the scrutiny of a larger, more regulated company. This is a builder-minded leadership role focused on continuous improvement rather than steady-state operations. The Director will assess the security team and program, identify gaps in skills, processes, and tooling, and improve both security posture and the people and practices that deliver it. The role partners with Engineering, Infrastructure, executive leadership, external auditors, and security vendors to balance business needs with effective security controls.

Requirements

12+ years of experience in information security.
5+ years leading security teams and owning a security program at director level or above.
Proven record leading security through a growth cycle, through SOX-relevant IT controls, and in work with external auditors.
Deep GRC experience, including SOC 2, risk management, control design and testing, evidence management, and running audits from the security side.
Hands-on command of detection and response, including working with an MDR provider and SIEM and managing incidents under pressure.
Strong cloud security background, with Azure as the primary environment, as well as endpoint, network, and identity security experience.
Application security and DevSecOps experience, including a record of setting standards that Engineering teams adopt.
Ability to assess a team, identify skill and process gaps, and rebuild or upgrade the team to close them.
Executive presence and ability to brief executive leadership, the CFO, and auditors; explain risk in business terms; and challenge senior leaders with evidence.
Bachelor's degree in computer science, cybersecurity, information technology, or equivalent professional experience.

Nice To Haves

Security certifications such as CISSP, CISM, CISA, CRISC, or CCISO; equivalent experience is also accepted.
Experience in logistics, transportation, brokerage, or another high-volume, partner-connected business.
Experience with AI governance and policy for enterprise AI tools.

Responsibilities

Own detection, monitoring, and incident response end to end, including the MDR relationship, SIEM use, and escalation paths into the service management workflow.
Set measurable incident response-time and quality standards, and lead post-incident reviews that improve operations.
Run vulnerability management and asset discovery as managed programs with defined owners, deadlines, and tracking.
Partner with Engineering leadership to define security standards, audit adherence, and integrate security into software delivery.
Set security standards for the Azure-primary cloud environment and monitor security posture against them.
Escalate and drive remediation when partners do not meet agreed commitments.
Own security testing strategy, including external penetration-test scope and routing automated testing results to the security team.
Define audit-readiness requirements beyond the current SOC 2 Type II and build a roadmap to meet them.
Own AI security policy and contribute to governance of AI tools, including data access, usage visibility, and risk.
Set identity security requirements and review outcomes with Infrastructure; uphold standards for access, privileged access, and review cadence.
Run third-party security risk management from intake and assessment through ongoing review, and oversee responses to customer security questionnaires through the team.
Review and improve how security work is generated, owned, and prioritized, replacing ad hoc selection with a disciplined process.
Report security posture, risk, and progress to executive leadership in clear business terms.
Assess the security team and program, identify skill and process gaps, and rebuild or upgrade the team as needed.

Benefits

Comprehensive medical, dental, vision, life, disability, and supplemental coverage.
Matching 401(k) program.
Employee Resource Groups.
Office-wide engagement activities, team events, and happy hours.
Casual dress code.
Free onsite parking.
Fully stocked coffee bar.
Onsite gym.
Free counseling sessions through the Employee Assistance Program.
Company-paid holidays, paid vacation time, and wellness days.
100% paid parental leave.
Employee referral program.
Relocation assistance for employees who are not local to the area.