CISO

• Set Ent's company-wide security strategy and roadmap with priorities, ownership, and measurable outcomes
• Personally drive critical assessments, control design, remediation, and incident work
• Build a focused internal security team and operating model, using outside partners where useful
• Own security risk across identities, employee endpoints, SaaS applications, cloud infrastructure, company data, software supply chain, and third-party vendors
• Partner with Engineering and Product on architecture, threat modeling, secure design reviews, vulnerability management, secrets and dependency management, logging, monitoring, and remediation
• Establish and improve controls for identity and access management, device security, privileged access, data protection, configuration management, and employee onboarding and offboarding
• Build and lead incident response, including detection, escalation, investigation, containment, communications, tabletop exercises, post-incident reviews, business continuity, and disaster recovery improvements
• Lead security assurance and compliance programs involving SOC 2, ISO 27001, FedRAMP, and customer-specific standards
• Own customer and partner security diligence, including questionnaires, audits, penetration tests, security reviews, and contractual security commitments
• Create policies and security education for sensitive data, approved AI tools, and risks from AI agents and automation
• Use Ent's product internally and provide structured feedback to Product, Engineering, and Research
• Report Ent's risk, readiness, incidents, and investment priorities to the executive team and board
• Represent Ent in strategic customer security conversations when needed