Director of Security and Compliance, Newfront
$197.2-246.5k
+Equity. Salary applicable to California, Washington, Colorado and New York only
Modern business insurance company
Job no longer available
Modern business insurance company
501-1000 employees
Job no longer available
$197.2-246.5k
+Equity. Salary applicable to California, Washington, Colorado and New York only
501-1000 employees
Company mission
To help thousands of clients mitigate risk and move the world forward.
Role
Who you are
- We are seeking an experienced and operationally-focused Director of Security and Compliance
- 8+ years of experience in application security, product security, and compliance management, with a strong operational focus
- Bachelor’s degree in information technology, information systems, computer science, or related field
- Proven experience with industry standards and compliance frameworks such as SOC2, HIPAA, ISO 27001, and NIST
- Extensive track record overseeing a secure environment for storing confidential customer and PII data
- Hands-on experience with security information management tools (e.g. Vanta, Arctic Wolf), penetration testing, and incident response processes
- Strong understanding of cloud security, particularly in AWS
- Familiarity with Okta for identity and access management
- Excellent communication and collaboration skills, with the ability to respond quickly to security inquiries in high-pressure environments
- Experience with data security and access control in an environment that leverages BPO (Business Process Outsourcing)
What the job involves
- This person will oversee the security of our applications, products, and data, while ensuring adherence to critical compliance frameworks such as SOC2 and HIPAA. Importantly, this person will be the main point of contact for security-related questions from Newfront clients and prospects
- The Director of Security and Compliance will report directly to Chief Operating Officer and identify cross functional partners and outside resources needed to drive security and compliance across Newfront
- Lead application and product security efforts, including vulnerability monitoring, penetration testing, and red team exercises
- Maintain and oversee compliance with industry standards such as SOC2, HIPAA, and ISO 27001
- Ensure compliance alignment with evolving business needs, client requirements, and regulatory changes, including adopting additional certifications
- Develop and manage processes for rapid response to security inquiries from prospects and clients during RFPs and the sales process, ensuring a tight SLA on requests
- Collaborate with Engineering and DevOps teams to enhance cloud security for AWS and other environments
- Oversee incident response efforts in coordination with external security partners, such as Arctic Wolf, to mitigate and resolve security threats
- Establish and maintain a comprehensive security package for use in sales and client communications
- Ensure effective endpoint security and asset management across corporate devices, including laptops and mobile devices. We’re currently using Kandji and Microsoft Intune
- Manage governance, risk, and compliance (GRC) initiatives, ensuring internal and external adherence to best practices and frameworks
- Collaborate cross-functionally to implement secure onboarding/offboarding processes, integrating with identity management systems like Okta
- Stay current with emerging security threats and ensure continuous improvement in security operations and practices across the organization
Our take
Newfront is an insurance broker offering tech-driven risk management and insurance cover for businesses. It claims to provide fairer premiums using rich datasets to assess risk rather than the more traditional method of risk categories. The insurance industry has been slow to embrace digital innovation, but Newfront is a new insurtech firms aiming to transform the industry.
Spike Lipkin, CEO, was part of the original team at Opendoor and helped guide the start-up to a $3B valuation. At Opendoor, Lipkin experienced first-hand the difficulty of securing business insurance and recognized that the industry would greatly benefit from the use of AI. Newfront's ethos is customer-focused, and it aims to provide a fairer, more accessible experience for businesses.
Newfront merged with ABD Insurance, a B2B insurance provider focusing on employee benefits and financial services programs. Together, they are working to write $2B in premiums annually and occupy a more significant slice of the business insurance market. Funding is being invested into both US expansion and building the modern platform for clients, insurance professionals, and trading partners.
Steph
Company Specialist at Welcome to the Jungle
Insights
1% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Apr 2022
$200m
LATE VC
Oct 2020
$100m
SERIES C
Total funding: $330.2m
Company benefits
- Health: Newfront offers an attractive mix of medical, dental, and vision plans for you and your family.
- Wellbeing: Resources like our employee assistance program and company work-life balance program support your peace of mind.
- Work Flexibility: Flexible PTO offerings and remote/hybrid schedules allow you to flex where and how your time is spent.
- Future Planning: Prepare for tomorrow with company equity, 401K match, and family forming benefits.
Company HQ
Financial District, San Francisco, CA
Leadership
Spike Lipkin
(Co-Founder & CEO)Prior to co-founding Newfront in 2017, Spike was the Head of Finance at Opendoor, and Investor at The Blackstone Group.
Gordon Wintrob
(Co-Founder)Gordon previously co-founded StackLead where he served as the CEO. He also worked as an Engineering Manager at LinkedIn and as a Software Engineer at CardSpring.
Share this job
View 3 more jobs at Newfront