Chief Information Security Officer, Grafana Labs

• The ideal candidate will have a proven track record of building and/or implementing and improving the maturity of security programs in Cloud-based SaaS organizations and possess excellent leadership and communication skills
• You have previous experience as a CISO or CSO at a B2B, cloud-based SaaS company; IPO experience is a plus
• While the core focus of the role is on leadership, strategy, and executive communications, you should have enough technical skills/understanding of our stack to manage and challenge a highly technical team and help them arrive at strong decisions
• You approach security with a DevOps mindset. You prefer security by enablement, automation, and guardrails over gates and roadblocks
• You have familiarity with securing and operating on public Cloud (AWS, GCP, Azure) providers, with Kubernetes, and with securing combined open-source software (OSS) and SaaS products
• You will be comfortable working with engineering teams who have a strong sense of autonomy in their decision-making, be it technical or product-focused
• You possess domain knowledge of common information security, business continuity and privacy management frameworks, regulatory requirements and applicable standards such as ISO 27001, SOC 2, HIPAA, GDPR, PCI, FedRamp, SOX, etc. You have experience maintaining these standards while maintaining operational efficiency
• You are an excellent written and verbal communicator. You can articulate complex cybersecurity concepts to both technical and non-technical audiences. You are adept as translating security problems to business impact

Desirable

• We are looking for a Chief Information Security Officer to lead our Security team, reporting to the CTO
• You will be responsible for developing and implementing security strategies across the Security Engineering, Assurance and Security Operations teams, as well as liaising with other teams delivering parts of our overall security posture
• Define and optimize the security strategy in concert with your leadership team, ICs and stakeholders across the business
• Work with customers and prospects to address security concerns. Supporting GTM where significant deals require input from the CISO to close
• Regular 1:1s, coaching and mentoring to ensure your team members are motivated, happy and engaged. Providing continuous feedback to ensure that they can add value while maintaining high standards
• Collaborating with our Engineering Leaders and other organization stakeholders to help define and influence wider product strategy, roadmaps and designs
• Lead effective risk management and compliance programs
• Be actively engaged with significant incidents, including preparation, simulation, response, and affected customer notification and communications
• Maintain executive, board, and investor relations with regard to security