Director, Information Security

Description

Sprout Social is looking to hire a Director, Information Security to join our team.

Why join Sprout’s Security team?

Security sits at the intersection of empowering teams to move quickly and mitigating risks to our overall business. We are enablers who strive to hone our unique craft and minimize friction or red tape. As a part of this team, you are given the space and encouraged to stretch beyond your core function and make a deeper impact on the broader organization. In short, the work you do here matters, and you feel that day in and day out. 

What you’ll do

• Security Strategy Alignment: Develop and implement security strategies that align with the organization’s overall business objectives, ensuring a balance between security requirements, innovation, and operational efficiency.
• Risk Management Leadership: Lead the identification, assessment, and prioritization of cyber risks, including third-party risks, to protect intellectual property and sensitive data across the organization.
• Incident Response Preparedness: Ensure the organization is prepared for significant cyber incidents by consistently reviewing and improving incident response plans through regular exercises and simulations.
• Threat Detection and Response: Lead proactive threat detection and response efforts, staying ahead of emerging threats, advanced persistent threats (APTs), and vulnerabilities, including zero-day threats.
• Team Leadership and Development: Attract, develop, and retain top cybersecurity talent by providing mentorship and effective feedback, as well as creating opportunities for growth while promoting cross-functional collaboration within the company.
• Security Investment and Resource Allocation: Prioritize security investments in both tools and human resources, managing the security budget effectively to ensure comprehensive coverage and optimal use of resources.
• Long-Term Security Vision: Work with your team and peers to create and maintain a forward-looking security vision and roadmap that ensures the organization’s resilience in the face of evolving cybersecurity challenges, technological advancements, and business growth.

What you’ll bring

We’re looking for a data-driven, analytically-minded security leader who will bring a deep understanding of industry best practices and experience working with engineering teams in a large, globally distributed company. If you are passionate about Information Security and can lead teams to keep our company safe and secure, we'd love to talk with you!

The minimum qualifications for this role include:

• 5+ years of Information Security leadership, including in-depth knowledge of cybersecurity principles, industry-standard frameworks, best practices, and managing a geographically distributed team
• 10+ years of experience in Information Security 
• 2+ Hands-on experience leading and building application security programs

Preferred qualifications for this role include:

• Problem-solving and analytical skills with the ability to translate strategic-level goals into actionable objectives
• Experience with securing modern SaaS-based environments, with technologies such as: SAST, DAST, securing CI/CD pipelines, CSPM, CNAPP, native AWS Security tools
• Familiarity with enterprise security monitoring and orchestration technologies, such as: EDR, SIEM, SOAR, various scanners, etc.
• Industry-relevant certifications (CISSP or CISM, CRISC, CGEIT)
• The ability to motivate and manage with excellent communication skills, both written and verbal, and the ability to work collaboratively with cross-functional teams.
• Deep understanding of technologies and tools used to deliver world-class software.

How you’ll grow:

Within 1 month, you’ll plant your roots, including

• Complete Sprout Social’s new hire training & onboarding program alongside other new Sprout team members. You’ll gain a broader understanding of our products and how your role fits into the organization.
• Make a plan with your manager to set initial priorities, align on expectations for your role, plant goalposts for your career, and learn the team's current Mission, Goals, and Objectives along with future product roadmaps.
• Begin to understand the capabilities of our tools and teams
• Start to build relationships with the team.
• Learn Sprout's management practices and tools.
• Provide regular technical guidance and feedback through 1:1s and prioritization

Within 3 months, you’ll start hitting your stride by:

• Understanding the breadth and depth of technologies and tools under the team’s purview
• Leading security team discussions and decisions, asking the right questions to push your team to successful outcomes.
• Meeting with your direct reports regularly and providing them with direct, constructive feedback on their work, as well as formulating career growth plans.
• Helping the team improve processes and team rituals.
• Building relationships with our infrastructure and development teams to identify ways your team can be more proactive and effective.
• Honing in on the team's vision and partnering with your team to create and prioritize team quarterly objectives and key results
• Creating connections across the organization through active networking and community building to help foster a security-first culture

Within 6 months, you’ll be making a clear impact through:

• Guiding your team to identify security gaps identified within our systems, document plans documented to mitigate identified risks, and work prioritized within various team’s workstreams
• Measurably improving upon internal and external security policies, standards and security tooling used at Sprout.
• Leading the performance review and career band calibration process for your team to grow your team members and ensure they are focused on the right things.
• Conveying the security strategy and vision to your team, technology leadership, and the broader Sprout organization.

Within 12 months, you’ll make this role your own by:

• Become a go-to expert and application security representative within Sprout
• Leading the team in the creation of the security roadmap for future work
• Having development plans in place for your team and holding them accountable.
• Effectively communicating with partners across the organization to ensure big-picture alignment and encourage cross-team collaboration
• Surprise us! Use your unique ideas and abilities to change Sprout Security in beneficial ways that we haven’t considered yet

Of course, what is outlined above is the ideal timeline, but things may shift based on business needs and other projects and tasks could be added at the discretion of your manager.

Our Benefits Program

We’re proud to regularly be recognized for our team, product and culture. Our benefits program includes:

• Insurance and benefit options that are built for both individuals and families
• Progressive policies to support work/life balance, like our flexible paid time off and parental leave program 
• High-quality and well-maintained equipment—your computer will never prevent you from doing your best
• Wellness initiatives to ensure both health and mental well-being of our team
• Ongoing education and development opportunities via our Grow@Sprout program and  employee-led diversity, equity and inclusion initiatives.
• Growing corporate social responsibility program that is driven by the involvement and passion of our team members
• Beautiful, convenient and state-of-the-art offices in Chicago’s Loop and downtown Seattle, for those who prefer an office setting

Whenever possible, Sprout wants to provide our team with the flexibility to work in the location that makes the most sense for them. Sprout maintains a remote workforce in many places in the United States. However, we are not set up in all states, so please look at the drop-down box in our application to see whether your state is listed. Few roles require an office setting. If your position requires a physical presence in a Sprout office, it will be evident in the job listing and your offer letter.

The base pay range for this role is $153,000 - $229,000 USD annually. Individual base pay is based on various factors, including relevant experience and skills, the responsibility of the role, and job duties/requirements. In addition to base pay, some Sales and Success roles can earn sales incentives. 

Sprout’s compensation ranges are intentionally broad to allow for our team members' growth within their role. These ranges were determined by a market-based compensation approach; we used data from trusted third-party compensation sources to set equitable, consistent and competitive ranges. We also evaluate compensation bi-annually, identify any changes in the market and make adjustments to our ranges and existing employee compensation as needed.

Base pay is only one element of an employee's total compensation at Sprout. Every Sprout team member has an opportunity to receive restricted stock units (RSUs) under Sprout’s equity plan. Employees (and their dependents) are covered by medical, dental, vision, basic life, accidental death, and dismemberment insurance, and Modern Health (a wellness benefit).  Employees are able to enroll in Sprout’s company’s 401k plan, in which Sprout will match 50% of your contributions up to 6% with a maximum contribution. Sprout offers “Flexible Paid Time Off” and ten paid holidays. We have outlined the various components to an employee’s full compensation package here to help you to understand our total rewards package.

Sprout Social is proud to be an Equal Opportunity Employer and an Affirmative Action Employer. We do not discriminate based on identity- race, color, religion, national origin or ancestry, sex (including sexual identity), age, physical or mental disability, pregnancy, veteran or military status, unfavorable discharge from military service, genetic information, sexual orientation, marital status, order of protection status, citizenship status, arrest record or expunged or sealed convictions, or any other legally recognized protected basis under federal, state, or local law. Learn more about our commitment to diversity, equity and inclusion in our latest DEI Report.

If you need a reasonable accommodation for any part of the employment process, please contact us by email at [email protected] and let us know the nature of your request and your contact information. We'll do all we can to ensure you're set up for success during our interview process while upholding your privacy, including requests for accommodation. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address.

For more information about our commitment to equal employment opportunity, please click here (1) Equal Opportunity Employment Poster  (2) Sprout Social's Affirmative Action Statement (3) Pay Transparency Statement. 

When you apply for employment with Sprout Social, we will process your job applicant data, including your employment and education history, transcript, writing samples, and references as necessary to consider your job application for open positions. Your personal data will be shared with Greenhouse Software, Inc., and Crosschq, Inc., cloud services providers located in the United States of America and engaged by Sprout Social to help manage its recruitment and hiring process on Controller’s behalf. Accordingly, if you are located outside of the United States, by clicking “Submit Application” on this site, you consent to the transfer of your personal data to the United States. For more information about our privacy practices please visit our Privacy Policy. California residents have additional rights and should review the Additional Disclosures for California Residents section in our Privacy Policy.

Additionally, Sprout Social participates in the E-Verify program in certain locations, as required by law. 

#LI-REMOTE