Security and Compliance Manager, Bubble
$150-200k
+ Equity
No-code software development platform
Open for applications
No-code software development platform
201-500 employees
Open for applications
$150-200k
+ Equity
201-500 employees
Company mission
Bubble's mission is to erase the distinction between software use and software creation.
Role
Who you are
- We’re a scaling startup looking for a driven, hands-on, pragmatic, and business-oriented Security & Compliance Manager to serve as our first dedicated security hire
- 5+ years experience in a role focused on software security, privacy, and/or compliance with an understanding software products and security council work
- Successful experience working, collaborating, and establishing credibility and relationships with senior leadership, colleagues, and customers
- Demonstrated success working with external auditors, outside consultants, and legal affairs
- Experience or knowledge of security risk assessments and gap analysis
- Experience with HIPAA and one or more IT security compliance frameworks, such as DORA, PCI DSS, and NIST CSF
- Experience and knowledge of cloud space (AWS, Azure, GCP)
- Certified Information Systems Security Professional (CISSP) preferred (or CISA, CISM)
What the job involves
- Bubble Security is responsible for our information security program. The goal of the program is to reduce risks in our systems and establish trust with our users. With this being our first dedicated security and compliance hire, our goal is to establish a robust framework that reduces risk, ensures compliance, and strengthens trust with both internal stakeholders and external users
- In this role, you’ll be a thought leader, consultant, and subject matter expert—collaborating across the organization to develop, implement, and regularly assess our security, privacy, and compliance practices
- You’ll coordinate efforts for audits, questionnaires, and overall improvements to Bubble’s security and reliability. This is an intellectually challenging position with significant ambiguity and complex problem-solving, offering a unique opportunity to make a meaningful impact on our organization’s future
- Establish, track, and report key performance indicators to your stakeholders on a regular basis
- Be the main point of contact for audits/assessments including audit plan preparation, policy creation, review of documentation and evidence, evaluation of procedures, and interviews
- Work collaboratively with internal teams (Engineering, Legal, Product, and People) to identify, manage, and implement solutions related to privacy, data protection, and compliance requirements
- Provide leadership and guidance to key stakeholders on questions or issues related to security, privacy, and compliance
- Leverage knowledge of industry standards and best practices to assess the current state of security and compliance risks, identify areas of exposure, and address the gaps by implementing remediating controls
- Lead our security incident response process and vulnerability disclosure programs, ensuring swift detection, thorough investigation, and prompt remediation of potential threats
Our take
More people than ever are interested in starting a digital product business such as a SaaS, social network or marketplace, but getting started is tough. Creating tangible proof-of-concept products generally requires software development skills, and without experience in coding, this usually results in expensive programmer hires.
Bubble provides a no-code software development platform, allowing its users to build SaaS apps, dashboards, CRMs, marketplaces, social networks, and other web or mobile-based software applications without coding experience. The platform allows users to navigate prototyping, launch, collaborative iterative development, and unlimited scaling through simple drag-and-drop interfaces, allowing anyone to develop software without the need for programming experience.
No-code software development startups have been growing in popularity and this undeniably presents significant competition for Bubble, but its all-in-one approach to design, functionality, and management gives them a cutting edge over similar niche-focussed alternatives. The company claims that through its platform, businesses can launch and develop products at a much faster rate due to increased accessibility to software development, without the need for expensive hires and infrastructure.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
38% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jul 2021
$100m
SERIES A
Jul 2020
$71m
SEED
Total funding: $177.4m
Company benefits
- Generous equity - Everyone at Bubble gets equity in the company. It is important to us that you are invested in Bubble's future. We're here for the long term, and we want you to have a stake in it
- Flexible PTO - It's important for the team to be able to disconnect when they’re off. The team takes up to 20 days off per year. You can discuss with your manager to take more if needed
- Work from home opportunities
- Competitive healthcare - Your health is important. Choose from a host of medical, dental, and vision insurance options that suit your needs, either 100% employer-paid to tiers requiring minimal pre-tax deductions
Company values
- Empowerment - Helping build others up by giving them leverage and autonomy. In the context of our team, helping people become co-owners of Bubble’s vision. In the context of the world, helping people participate in the economy and bring new tech-enabled ideas to life
- Genuineness - Communicating and taking responsibility as human beings rather than hiding behind corporate-speak
- User-centricity - Remembering that Bubble exists first and foremost to have a positive impact on the people who use our software, and making decisions accordingly
- Kindness - Treating our teammates and our community with friendliness, consideration, and respect
- Fire - A shared intrinsic motivation to turn our vision as a company into reality, with determination, courage, and enthusiasm
Company HQ
Flatiron District, New York, NY
Articles
Leadership
Emmanuеl Straschnοv
(Co-CEO & Co-Founder)Experience as CEO Assistant for Prada. Consultant for Roland Berger Strategy Consultants from 2007 to 2010.
Josh Haas
(Co-CEO & Co-Founder)Management Associate for Bridgewater Associates from 2007 to 2010. Experience as Co-founder and CTO of KeywordSmart.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 5 more jobs at Bubble