Head of Security

Tatari•San Francisco, CA

1d•Hybrid

About The Position

Tatari is on a mission to revolutionize TV advertising. Founded in 2016 to help transform the antiquated world of TV advertising through the intelligent application of., Tatari helps some of the world’s fastest growing brands including Chime, Calm, Tecovas, Manscaped, Saatva, and Liquid I.V ., reach their customers using linear and streaming TV ads. Our platform combines sophisticated media buying with proprietary analytics to turn TV advertising into an automated, digital-like experience, enabling businesses of any size to advertise on TV. That approach has earned Tatari broad industry recognition, including being named Best CTV AdTech Platform in the 8th annual MarTech Breakthrough Awards , as well as honors from Digiday ( Best Connected TV Platform) , AdExchanger ( Most Innovative TV Advertising Technology ), and Business Insider ( Hottest AdTech Companies) . Tatari has also been recognized as the Best Place to Work by Inc. Magazine . Backed by an executive team of former founders and senior leaders from companies including Shazam, TrueCar, AdapTV, LiveRail, Amazon, Google, Meta, Microsoft, and Yahoo, Tatari continues to scale rapidly as TV advertising enters its next major era. We're a late-stage AdTech company with strong internal alignment on security, a recently attained SOC 2 Type II attestation, and a clear mandate to mature our security and privacy posture. We're looking for the right leader to make it happen. The Role: You'll lead our existing Security Engineering team, reporting to the SVP of Engineering and work closely with Engineering leadership to develop a deep understanding of our AWS-based SaaS platform and operational environment, then build and execute the roadmap to meet, and exceed, industry security standards. This is a hands-on leadership role of a small but talented Security team. You'll set strategy, grow your team, and drive hands-on technical execution when necessary.

Requirements

Meaningful time leading information security teams at a high-growth SaaS company
Strong AWS and Kubernetes security expertise (IAM, networking, data protection, and threat detection)
Led incident response, including stakeholder communication and post-mortems
Built or significantly scaled a security risk management program
Track record of hiring, developing, and retaining security engineers
Broad knowledge across application, infrastructure, and corporate security, with deep expertise in multiple areas
Succeeded in leading security programs through SOC 2 and additional frameworks
Hands-on use of AI in security workflows (threat detection, vulnerability management, security automation), including working knowledge of how LLMs introduce new attack surfaces

Nice To Haves

Industry-recognized security certifications (e.g., CISSP, CISM) are a plus

Responsibilities

Build and execute Tatari's security roadmap across application, infrastructure, and corporate security
Own incident response end-to-end (detection, containment, communication, post-mortem), and serve as the Security representative to executives
Own detection and monitoring across our AWS environment
Run our risk management program (intake, triage, acceptance, reporting), ensuring leadership receives clear and actionable visibility into our risk posture
Lead our Security Policy Advisory Group and develop internal policies, external-facing documentation, and security training
Partner with Legal on our privacy program as it evolves to meet AdTech-specific obligations (CCPA and other US state privacy laws)
Partner with Engineering teams to enable seamless integration of security best practices throughout the development lifecycle
Own customer-facing security: questionnaires, due diligence, compliance attestations, and security review calls
Report up to exec staff and board on posture, incidents, and program maturity
Manage relationships with external cybersecurity vendors