Senior Director of Information Security, Rent the Runway
$184-240k
+ Equity
In office Monday - Thursday
4 days a week in office (Brooklyn, NY)
Women's clothing subscription service
Be an early applicant
Women's clothing subscription service
501-1000 employees
Be an early applicant
$184-240k
+ Equity
In office Monday - Thursday
4 days a week in office (Brooklyn, NY)
501-1000 employees
Company mission
Rent the Runway's mission is to power women to feel their best every day.
Role
Who you are
- Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred
- Minimum of 10 years of experience in information security, with at least 5 years in a leadership role
- Deep knowledge and practical experience with the NIST Cybersecurity Framework
- Proven experience in developing and managing GRC programs, including risk assessments, security policies, and compliance audits
- Demonstrated experience in fraud prevention strategies and techniques
- Strong understanding of privacy laws and regulations (e.g., GDPR, CCPA) and experience in implementing privacy compliance programs and privacy by design principles
- Extensive knowledge of security technologies and best practices, including network security, endpoint security, cloud security, identity and access management, vulnerability management, and incident response
- Excellent leadership, communication, and interpersonal skills, with the ability to effectively communicate complex security concepts to both technical and non-technical audiences
- Relevant certifications such as CISSP, CISM, or CISA are strongly preferred
- Experience in [mention any specific industry relevant to the company] is a plus
- Strong analytical and problem-solving skills
What the job involves
- RTR is seeking a highly motivated and experienced Senior Director of Information Security to lead our information security program, protecting both corporate and customer assets
- This role is crucial in establishing and maintaining a robust security posture, adhering to NIST best practices, and ensuring compliance with relevant regulations
- The Director will oversee all Information Security efforts including Governance, Risk, and Compliance (GRC), Fraud Prevention, and Privacy compliance initiatives, playing a key role in safeguarding our data and maintaining customer trust
- You will report to the VP, CISO and work collaboratively with the other members of RTR’s teams
- Strategic Leadership: Develop, implement, and maintain a comprehensive information security strategy aligned with RTR's business objectives, risk tolerance, and industry best practices
- NIST Framework Implementation: Direct the implementation and ongoing management of the NIST Cybersecurity Framework, ensuring that security controls and processes are effectively applied and continuously improved
- Governance, Risk, and Compliance (GRC):
- Establish and maintain a robust GRC program, including the development and enforcement of security policies, standards, and procedures
- Oversee risk assessments, vulnerability management, and security audits to identify and mitigate potential threats and ensure compliance with internal and external requirements
- Manage security and privacy awareness training programs to promote a security- and privacy-conscious culture
- Fraud Prevention: Develop and implement effective strategies, systems, and controls to prevent, detect, and respond to fraudulent e-commerce activities, protecting RTR's assets and customers
- PCI-DSS Compliance: Oversee Payment Card Industry Data Security Standard (PCI-DSS) compliance to ensure secure handling of payment card information
- Privacy Compliance: Build and manage technical and operational aspects of RTR’s privacy compliance program; partner with Legal and other teams to establish policies and procedures to safeguard personal data; partner with Product, Engineering, and Marketing teams to implement privacy by design principles
- Incident Response: Lead the development, implementation, and execution of the incident response plan, including the investigation, containment, and remediation of security incidents
- Security Architecture: Collaborate with IT and engineering teams to integrate security best practices into the design, development, and deployment of systems and applications
- Application Security: Drive the implementation of secure software development lifecycle (SSDLC) practices and conduct regular application security assessments (e.g., SAST, DAST, penetration testing)
- Cloud Datacenter Security: Oversee the security of cloud environments and datacenter infrastructure, ensuring robust controls, configurations, and monitoring are in place
- Vendor Security: Manage third-party vendor security risks by establishing and enforcing security requirements, conducting assessments, and monitoring compliance
- Team Management: Build, mentor, and lead a high-performing information security team, fostering a collaborative and results-oriented environment
- Communication and Reporting: Provide regular updates to senior management on the organization's security posture, risks, and compliance efforts
Our take
Rent the Runway seeks to profit from two important trends in apparel consumption: wanting to stay on top of the latest fashion trends while living and purchasing sustainably. By providing a platform for women to rent designer pieces, its users can have it all.
The company allows users to rent, subscribe, or buy designer apparel and accessories. It achieves this with its network of partnerships with hundreds of top designers and managing the crucial but complicated logistics in-house. It offers its partnered brands sophisticated analytics about potential customers in return for lower prices on designer garments.
Rent the Runway is now focused on diversifying revenue streams while reducing its costs. Its recent partnership with Amazon is an example of this new direction: while it will use this chanel sell to clothes previously rented through its platform, it will for the first time be selling new clothes based off of rental items modified in line with market data.
While moves such as this may well shift Rent the Runway towards profitability, it also risks undercutting the company's central message of sustainability and supporting the circular economy. The company believes that by creating better quality clothing it will nonetheless be aiding in the fight against fast fashion. Time will tell if this move helps or hinders the sustainability movement, but it is likely to boost Rent the Runway's bottom line regardless.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-6% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Apr 2020
$80m
SERIES G
Mar 2019
$125m
SERIES F
Total funding: $401.2m
Company benefits
- Generous Paid Time Off including annual leave, paid bereavement, and family sick leave - every employee needs time to take care of themselves and their family.
- Universal Paid Parental Leave for both parents + flexible return to work program - because we know your newest family member(s) deserve your undivided attention.
- Paid Sabbatical after 5 years of continuous service
- Exclusive employee subscription and rental discounts
- 401k match
- Work from home opportunities
- Comprehensive health, dental care and dependents care from day 1 of employment - Your health comes first and we’ve got you covered.
- Competitive Stakeholder Pension - taking care of your future
- Company wide events and outings - our team spirit is no joke - we know how to have fun!
- Hybrid Work - our corporate employees have the option to work remotely 3 days a week, in accordance with Company policies
Company HQ
Hudson Square, New York, NY
Leadership
Jennifer Hyman
(CEO)Prior to Rent the Runway, was director of business development at IMG where she focused on the creation of new media businesses for IMG's fashion division.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 5 more jobs at Rent the Runway