Head of Information Security

Accumulus Technologies

. Own the corporate and product information security strategy, program, and annual objectives; define a prioritized roadmap and align security resources and investment needs with the COO .

Posted 9/18/2026full-timeRemote • United StatesLead💰 $200,000 - $260,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading information security strategy and program delivery, with a strong focus on cloud and SaaS security, GRC program oversight, and incident response management. Proven ability to develop and manage security teams while effectively communicating security posture to stakeholders.

Highest-signal resume keywords

Information Security LeadershipGRC Program ManagementCloud Security ExpertiseIncident Response ManagementCustomer Security Assurance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Strategy DevelopmentVulnerability ManagementIdentity And Access ManagementEncryptionIncident ResponseAudit CoordinationRisk AssessmentControl Effectiveness EvaluationSecure DevelopmentDisaster Recovery

Soft Skills

Team DevelopmentCross-Functional CollaborationPragmatic Decision-MakingInfluencing SkillsCommunication

Tools & Technologies

VantaISO 27001SOC 2HITRUST

Industry Keywords

Cyber Risk ManagementSecurity ArchitectureMaterial Incident ResponseAudit ReadinessSecurity Posture Reporting

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Own the corporate and product information security strategy, program, and annual objectives; define a prioritized roadmap and align security resources and investment needs with the COO
Own the evolution of technical security capabilities across cloud infrastructure, product security, identity, vulnerability management, detection and response, and security architecture
Lead and develop the CyberDefense and Product Security teams; set priorities, performance expectations, and accountability for internal staff and external providers
Oversee the GRC program and delivery of audit coordination, evidence collection, policies, assessments, remediation tracking, and Vanta administration
Maintain audit readiness and oversee required audits, certifications, and attestations
Review material cyber risks, challenge risk ratings and treatment plans, approve security exceptions within delegated authority, and escalate business risk acceptance
Partner with Engineering, Product, DevOps, and IT leadership to embed security in architecture, development, and operations
Provide senior security direction during material incidents and ensure incident response, disaster recovery, and business continuity capabilities are tested
Resolve cross-functional security decisions affecting delivery, customer commitments, or business risk
Report security posture, material risks, incidents, remediation performance, emerging threats, and investment priorities to executive leadership and the Board
Serve as Accumulus’ senior security representative with customers, prospects, regulators, auditors, partners, and insurers
Lead the customer security assurance program, including customer and prospect discussions, due diligence, RFPs, and security assessments

Requirements

What you’ll need

Substantial progressive experience in information security, including leadership of a corporate or product security function and ownership of security strategy and program delivery
Demonstrated ability to manage and develop internal security teams and hold external contractors or service providers accountable for results
Required familiarity with Vanta and with ISO 27001, SOC 2, and HITRUST; practical experience overseeing GRC programs, audits, evidence readiness, and remediation
Strong understanding of cloud and SaaS security, secure development, identity and access management, encryption, vulnerability management, monitoring, and incident response
Experience assessing cyber risk, evaluating control effectiveness, governing security exceptions, and translating technical findings into business decisions
Proven ability to lead customer security reviews and questionnaires and communicate security posture credibly to executives, auditors, regulators, and technical stakeholders
Experience coordinating response, recovery, resilience testing, and follow-through on corrective actions
Ability to prioritize competing demands, influence cross-functional teams, and make pragmatic, risk-based security decisions that support product delivery and commercial objectives while protecting the company’s security and assurance commitments

Benefits

Comp & perks

Discretionary bonus of 22%
3% contribution to a 401(k), even if you do not make contributions
Medical, dental, vision, short-term disability, long-term disability, and life insurance from day one
Unlimited vacation
Up to 16 weeks of parental leave