Director of Information Security, HopSkipDrive
$130-170k
+ Stock Options
More information about location
Safe youth transportation solution
Job no longer available
Safe youth transportation solution
501-1000 employees
Job no longer available
$130-170k
+ Stock Options
More information about location
501-1000 employees
Company mission
To create opportunity for all through mobility.
Role
Who you are
- You are a hands-on individual comfortable functioning as an individual contributor, while you have the leadership skills to build a team as we scale
- Proficiency in technologies such as log analysis, SIEM, and AWS to support security initiatives
- Knowledge of security automation tools and scripting languages to enhance security operations is a plus
- Bachelor's degree in Computer Science, Information Security, or a related field
- Minimum of 5 years of experience in a security-related role, preferably within a technology company
- Proven track record of maintaining SOC 2 compliance and managing other compliance frameworks such as HIPAA
- Relevant security certifications such as CISSP, CISM, or CISA are highly desirable
- Deep understanding of security technologies, including log analysis, Security Information and Event Management (SIEM), and cloud security (AWS)
- Experience with security automation tools and scripting languages (e.g., Python, Bash)
- Proficiency in vulnerability management tools and processes
- Strong analytical skills to identify security risks and develop effective mitigation strategies
- Proven ability to manage and respond to security incidents effectively
- Excellent communication skills to articulate security risks and recommendations to both technical and non-technical stakeholders
- Ability to collaborate with cross-functional teams and influence without authority
- Strong project management skills with the ability to manage multiple initiatives simultaneously
- Experience in developing and implementing strategic security roadmaps
- Highly motivated and proactive with a passion for staying current on the latest security trends and technologies
- Strong ethical standards and a commitment to maintaining the highest levels of confidentiality and integrity
What the job involves
- As a Director of Information Security, you will be at the forefront of safeguarding our company's digital assets and ensuring compliance with critical industry standards
- You will lead initiatives to enhance our security posture, manage compliance efforts, and communicate security risks effectively to various stakeholders
- Your role will encompass both strategic and operational responsibilities, ensuring our security practices align with business goals and regulatory requirements
- You will collaborate closely with Product, Engineering, People Ops, IT, Legal, and other departments to maintain compliance with frameworks such as SOC 2 and HIPAA
- Your expertise will guide the company through the complexities of security risk management, incident response, and vulnerability management
- Additionally, you will be responsible for proposing and implementing a cybersecurity roadmap, managing security training programs, and ensuring our technology stack, including logging, SIEM, and AWS, remains secure and up-to-date
- You will report directly to the Chief Product Officer
- Maintain SOC 2 compliance for the company, ensuring timely collection of evidence from engineering, People Ops, and IT
- Review legal documents, such as vendor contracts, data processing agreements, and RFPs, to ensure our company's security practices align with contractual requirements
- Familiarity with compliance frameworks such as SOC 2 and HIPAA
- Proactively identify areas to improve security across our applications
- Communicate security risks to business owners and stakeholders effectively
- End-to-end management of annual penetration tests, including vetting vendors, communicating with pen test companies, triaging findings, and delegating remediation to the engineering team
- Manage cybersecurity metrics, tracking and reporting on the effectiveness of security measures
- Propose and implement a quarterly cybersecurity roadmap to address evolving security challenges
- Manage cybersecurity training programs, including phishing training and specialized security training for engineers
- Own incident response, translating suspected issues into security risks and managing the end-to-end investigation and triage process
- Own the vulnerability management program, ensuring timely identification and remediation of vulnerabilities
- Stay current with the latest security trends, threats, and technology advancements to continuously improve the company's security posture
- Collaborate with cross-functional teams to integrate security best practices into all aspects of the business
- Advocate for a security-first culture within the organization, promoting awareness and proactive risk management
Our take
Across the US, school transportation is under pressure as driver shortages, budget cuts, and rigid bus routes are making it harder for students to get to school safely and on time. This has opened the door for smaller vehicles and ride-hailing services to step in and support those students who don't fit neatly into traditional routes. HopSkipDrive has grown within this space, offering a flexible alternative that helps schools fill these gaps.
HopSkipDrive connects children with carefully vetted caregivers (often grandparents, nurses or childcare processionals) who then provide reliable rides when buses or public transport falls short. Operating in 17 states and supporting over 10,000 schools, the services has certainly eased commutes for many families.
And now the company is focsued on strenghtening its impact with technology and innovation. With its RouteWise AI platform it helps districts cut costs, improve efficiency and manage driver shortages, all while new safety modules and AI-driven planning tools continue to raise industry standards. With these advancements and a growing network of partners, the company is ready to keep shaping a more flexible futur for school transportation.
Freddie
Company Specialist at Welcome to the Jungle
Insights
23% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Sep 2022
$37m
SERIES D
Aug 2021
$25m
SERIES C
Total funding: $107m
Company benefits
- Medical, Dental & Vision
- Health Spending Account
- Mental Health Resources
- Employee Assistance Program
- Short- & Long-Term Disability Insurance
- Paid Parental Leave
- 401K Plan
- Company Ownership/Equity
- Medical & Dependent Care FSA
- Travel Insurance
- Supplemental Legal
- Fully Remote Work Option
- Flexible Time Off
- 11 Annual Paid Holidays
- Week Closure at End of Year
- Sick Time Off for You and Family
- Home Internet Reimbursement
- Professional Development & Learning Stipend
- Remote & In-Person Quarterly Team Events
- Internal Rewards & Recognition Program
- Employee Referral Bonuses
Company HQ
Little Tokyo, Los Angeles, CA
Leadership
Joanna McFarland
(Co-Founder & CEO)Former Board Member at the Marketplace Industry Association and LA Tech.org.
Share this job