Director of Security

What You'll Do

Own detection, monitoring and incident response end to end, including the MDR relationship, SIEM use and escalation paths into our service management workflow.
Set measurable standards for response times and incident quality, and run post-incident reviews that change how we operate.
Run vulnerability management and asset discovery as a managed program with clear owners, deadlines and tracking.
Partner with Engineering leadership to define security standards, then audit against them. Build the working relationship so security is part of how software ships, not a late-stage gate.
Set security standards for our Azure-primary cloud environment and monitor posture against them.
Decide when to open the gate for speed and when to close it. When a partner does not follow through on agreed remediation, escalate and insist on execution.
Own security testing strategy, including the scope of external penetration tests and how automated testing results reach the security team.
Define what audit readiness requires beyond today's SOC 2 Type II, and build the roadmap to get there.
Own AI security policy and be a key contributor to how AI tools are governed, including data access, usage visibility and risk.
Set identity security requirements and review outcomes with Infrastructure, who own the identity platform. Hold the line on access standards, privileged access and review cadence.
Run third-party security risk management, from intake and assessment to ongoing review, and own the answers to customer security questionnaires through your team.
Review the fundamentals of how security work is generated, owned and prioritized, and replace ad hoc work selection with a disciplined process.
Report security posture, risk and progress to the executive leadership team in plain business terms.

Qualifications

12+ years in information security, with 5+ years leading security teams and owning a security program at director level or above.
Proven record leading security through a growth cycle and through SOX-relevant IT controls and working with external auditors.
Deep GRC experience: SOC 2, risk management, control design and testing, evidence management, and running audits from the security side.
Hands-on command of detection and response, including working with an MDR provider and SIEM, and running incidents under pressure.
Strong cloud security background, with Azure as the primary environment, plus endpoint, network and identity security.
Application security and DevSecOps experience, with a record of setting standards that Engineering teams adopt.
Demonstrated ability to assess a team, identify skill and process gaps, and rebuild or upgrade the team to close them.
Executive presence: able to brief the executive leadership team, the CFO and auditors, explain risk in business terms, and push back on senior leaders with evidence.
Security certifications such as CISSP, CISM, CISA, CRISC or CCISO. Demonstrated equivalent experience counts.
Experience in logistics, transportation, brokerage or another high-volume, partner-connected business. Industry-specific threats such as carrier identity fraud can be learned on the job.
Experience with AI governance and policy for enterprise AI tools.
Bachelor's degree in computer science, cybersecurity, information technology or equivalent professional experience.

The Perks of Working With Us

Take advantage of our comprehensive benefits package, including medical, dental, vision, life, disability, and supplemental coverage.
Invest in your future with our matching 401(k) program.
Build relationships and find your home at Arrive through our Employee Resource Groups.
Enjoy office wide engagement activities, team events, happy hours and more!
Leave the suit and tie at home; our dress code is casual.
Work in the booming city of Austin, TX – we are in a convenient location close to the airport and downtown.
Park your car for free on site!
Start your morning with a specialty drink from our fully stocked coffee bar, Broker’s Brew.
Sweat it out with the team at our onsite gym.
Maximize your wellness with free counseling sessions through our Employee Assistance Program
Take time to manage your physical and mental health - we offer company paid holidays, paid vacation time and wellness days.
Receive 100% paid parental leave when you become a new parent.
Get paid to work with your friends through our Referral Program!
Get relocation assistance! If you are not local to the area, we offer relocation packages.