Director of Security and Compliance, Newfront
$197.2-246.5k
+Equity. Salary applicable to California, Washington, Colorado and New York only
Digital insurance brokerage
Be an early applicant
Digital insurance brokerage
501-1000 employees
Be an early applicant
$197.2-246.5k
+Equity. Salary applicable to California, Washington, Colorado and New York only
501-1000 employees
Company mission
Their mission is to bring insurance into the 21st century, innovating and transforming the industry on behalf of its customers.
Role
Who you are
- We are seeking an experienced and operationally-focused Director of Security and Compliance
- 8+ years of experience in application security, product security, and compliance management, with a strong operational focus
- Bachelor’s degree in information technology, information systems, computer science, or related field
- Proven experience with industry standards and compliance frameworks such as SOC2, HIPAA, ISO 27001, and NIST
- Extensive track record overseeing a secure environment for storing confidential customer and PII data
- Hands-on experience with security information management tools (e.g. Vanta, Arctic Wolf), penetration testing, and incident response processes
- Strong understanding of cloud security, particularly in AWS
- Familiarity with Okta for identity and access management
- Excellent communication and collaboration skills, with the ability to respond quickly to security inquiries in high-pressure environments
- Experience with data security and access control in an environment that leverages BPO (Business Process Outsourcing)
What the job involves
- This person will oversee the security of our applications, products, and data, while ensuring adherence to critical compliance frameworks such as SOC2 and HIPAA. Importantly, this person will be the main point of contact for security-related questions from Newfront clients and prospects
- The Director of Security and Compliance will report directly to Chief Operating Officer and identify cross functional partners and outside resources needed to drive security and compliance across Newfront
- Lead application and product security efforts, including vulnerability monitoring, penetration testing, and red team exercises
- Maintain and oversee compliance with industry standards such as SOC2, HIPAA, and ISO 27001
- Ensure compliance alignment with evolving business needs, client requirements, and regulatory changes, including adopting additional certifications
- Develop and manage processes for rapid response to security inquiries from prospects and clients during RFPs and the sales process, ensuring a tight SLA on requests
- Collaborate with Engineering and DevOps teams to enhance cloud security for AWS and other environments
- Oversee incident response efforts in coordination with external security partners, such as Arctic Wolf, to mitigate and resolve security threats
- Establish and maintain a comprehensive security package for use in sales and client communications
- Ensure effective endpoint security and asset management across corporate devices, including laptops and mobile devices. We’re currently using Kandji and Microsoft Intune
- Manage governance, risk, and compliance (GRC) initiatives, ensuring internal and external adherence to best practices and frameworks
- Collaborate cross-functionally to implement secure onboarding/offboarding processes, integrating with identity management systems like Okta
- Stay current with emerging security threats and ensure continuous improvement in security operations and practices across the organization
Our take
Newfront Insurance is an insurance broker offering tech-driven risk management and insurance cover for businesses. It claims to provide fairer premiums using rich datasets to assess risk rather than the more traditional method of risk categories. The insurance industry has been slow to embrace digital innovation, but Newfront is a new insurtech firms aiming to transform the industry.
Spike Lipkin, CEO, was part of the original team at Opendoor and helped guide the start-up to a $3 billion valuation. At Opendoor, Lipkin experienced firsthand the difficulty of securing business insurance and recognized that the industry would greatly benefit from the use of AI. Newfront's ethos is customer-focused, and it aims to provide a fairer, more accessible experience for businesses.
Newfront merged with ABD Insurance, a B2B insurance provider focusing on employee benefits and financial services programs. Together, they are working to write $2 billion in premiums annually and occupy a more significant slice of the business insurance market. Funding is being invested into both US expansion and building the modern platform for clients, insurance professionals, and trading partners.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 4 rounds)
Apr 2022
$200m
LATE VC
Oct 2020
$100m
SERIES C
Total funding: $330.2m
Company benefits
- Insurance, Health & Wellness
- Health Insurance
- Financial & Retirement
- 401K Plan
- Family & Parenting
- Work From Home
- Vacation & Paid Time Off
- Gym Membership
- Commuter Checks & Assistance
Company values
- Focus on People - We believe in a future where a diverse and talented group of humans plus technology delivers a superior client experience. We are building technology that empowers, not replaces people. Developing and investing in colleagues makes Newfront a place where people can do the best work of their careers
- Blaze a Trail - The industry has been stuck in its ways of servicing clients and colleagues for many years, but nothing great was ever built by saying "this is the way it's always been done". Instead, we are building world-class experiences using first principles. By setting aside pre-conceived notions of what works, we can innovate on behalf of our clients
- Act Like Owners - We're building a culture of owners who take responsibility to deliver for our clients. We take pride in building a forever business together. We aren't satisfied with "good enough" and seek excellence in everything we do. Clients demand it
- Deliver Results - Insurance touches every part of modern life and clients depend on our results. We push ourselves to measure the client impact of everything we do and set ambitious goals for improvement
Company HQ
South Beach, San Francisco, CA
Articles
Leadership
Spike Lipkin
(CEO)After an MBA at Stanford, Spike spent a year as a Senior Consultant before 2 years at The Blackstone Group as an Investor. They left their role of 2 years at Opendoor.com in 2016 to co-found Newfront in 2017.
Gordon Wintrob
(CTO)Software Engineer at Cardspring, Engineering Manager at LinkedIn for 3 years.
Share this job
View 1 more job at Newfront