Lead, System Security

Slate Auto

. Define Slate's cybersecurity strategy, multi-year roadmap, risk-based priorities, security policy framework, risk register, and governance model .

Posted 10/8/2026full-timeRemote • United StatesSenior💰 $144,123 - $240,205 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in defining and executing cybersecurity strategies, leading compliance efforts, and managing security teams. Proficient in risk management, incident response, and embedding security practices across various technology domains.

Highest-signal resume keywords

Cybersecurity Strategy DevelopmentCompliance Leadership (SOX, ISO 27001, NIST CSF)Cloud Security ManagementIdentity and Access ManagementSecurity Program Maturity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementSecurity Policy FrameworkAudit ReadinessThreat ModelingSecure Software Development Lifecycle (SDLC)Penetration TestingData Classification and ProtectionVulnerability ManagementIncident Response PlanningSecurity Operations

Soft Skills

Strong CommunicationCollaborative ApproachLeadershipTeam DevelopmentPresentation Skills

Tools & Technologies

AWSAzureERP SystemsWMSTelematics SecurityAI/ML Security ToolsCrisis Communication ToolsSecurity Awareness Training ProgramsSupplier Cybersecurity RequirementsOT Security Programs

Certifications & Qualifications

CISSPCISMGICSPCCSP

Industry Keywords

Information SecurityCybersecurity Management SystemIEC 62443PCI-DSSConsumer Privacy RegulationsAutomotive SecurityEV SecurityConnected Product SecurityCMMCITAR/EAR

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityERPSDLC

About the role

Key responsibilities & impact

Define Slate's cybersecurity strategy, multi-year roadmap, risk-based priorities, security policy framework, risk register, and governance model
Report security posture and risk to the CTO, executive team, and board
Own the security budget
Lead compliance and regulatory readiness across SOX IT general controls, NIST CSF 2.0, ISO 27001, PCI-DSS, CCPA and state privacy laws, NIST 800-171, CMMC, and export control obligations
Own audit readiness, evidence collection, and remediation tracking
Recruit, lead, and develop the security team
Run security awareness and training programs
Establish vehicle and product cybersecurity capabilities, including TARA, secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements
Establish product security incident response and coordinated vulnerability disclosure programs
Embed security into the SDLC across consumer web, ecommerce, mobile, B2B integrations, and internal applications
Set standards for threat modeling, secure code review, SAST/DAST, dependency and secrets management, and cloud security posture across AWS, Azure, and edge platforms
Drive penetration testing and remediation prioritization
Secure ERP, WMS, procurement, warranty, and other enterprise platforms
Own role design, segregation of duties, privileged access, and access reviews
Establish an OT security program for the Warsaw plant and future sites aligned to IEC 62443
Own identity and access management, endpoint and email security, vulnerability management, and corporate security architecture
Define data classification, retention, protection standards, privacy-by-design controls, and safe-use controls for AI and LLM tools
Own detection, response, threat intelligence, incident response planning, crisis communications, legal coordination, and regulatory notification
Establish a third-party and supply-chain security risk program
Partner across Technology, vehicle engineering, manufacturing, legal, compliance, finance, internal audit, supply chain, and customer care

Requirements

What you’ll need

10 or more years in information security or cybersecurity
At least 5 years leading security teams or programs
Experience building or substantially maturing a security program across multiple domains
Hands-on leadership of compliance efforts against SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171
Experience with real audits and certifications
Direct experience securing manufacturing, industrial, or OT environments, or strong working knowledge of IEC 62443, OT network segmentation, and production-floor realities
Solid technical grounding in cloud security, identity and access management, application security, and security operations
Ability to evaluate architecture and challenge vendors
Track record of translating risk into business terms and making pragmatic, prioritized tradeoffs
Strong written and verbal communication, including presenting to executives and boards
Low-ego, collaborative approach to working across departments
Applicants must be authorized to work in the United States on a permanent basis
Automotive, EV, or connected product security experience, including ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System (preferred)
Experience standing up security for a greenfield plant, a new company, or a rapidly scaling business (preferred)
Consumer ecommerce and payments security, including PCI-DSS scoping and consumer privacy regulations (preferred)
Experience with CMMC, ITAR/EAR, or government and defense contracting requirements (preferred)
Familiarity with securing data platforms and AI/ML or LLM-based applications (preferred)
Industry certifications such as CISSP, CISM, GICSP, or CCSP (preferred)
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience (preferred)

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Vacation
401k
Equity program eligibility
Discretionary annual incentive program eligibility
Reasonable accommodation for qualified individuals with disabilities