Senior Director of Security
Company Description: Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy Inc. employee whether a team member of Etsy, Reverb, Depop, or Elo7 you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human
Job Description: What’s the role?We are looking for a security and privacy leader who believes that people come to work to do phenomenal things, and wants to build a security-by-design culture that allows for your team to continuously improve and share their craft.As the Sr. Director of Information Security, you will help drive and mature the security culture across Etsy and its subsidiaries using a tech-first approach. You’ll build partnerships with engineering, marketing, legal, compliance, finance, and HR (amongst others) in a vision of making Etsy the most secure place to find unique goods. If you like the sound of that and want to foster a transparent enablement culture, this could be the perfect match!This is a full-time position reporting to the VP of Engineering, CISO and the base salary range will be 277,000 - 359,000 USD per year. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and our competitive benefits that support you and your family as part of your total rewards package at Etsy. For this role, we are considering candidates based in the United States who are either remote, flex, or office-based. Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more about our flexible work options and workplace safety policies here.What does the day-to-day look like?* You will manage and grow an organization of over two dozen full-time team members responsible for: application security, infrastructure security, compliance engineering, risk engineering, and privacy engineering. Our security teams build and maintain critical security systems (e.g. our public facing authentication service, our internal alerting infrastructure), perform security assessments, and work closely with other teams to resolve issues and improve our security posture.
* You will be the primary security partner to other engineering organizations. At Etsy, we view security as a key partnership to the business tasked with raising and addressing risks, and to be successful you will need to partner with other team members and build effective engagement models that rationalize risk reduction.
* Drive critical strategic decisions related to our security effort. For example: build vs buy, where we invest resources in terms of preventative vs detective controls, and how we set and track goals on your team. You will champion accountability in a friendly and creative atmosphere.
* Ensure excellent execution of day to day responsibilities. You will hold managers accountable to a roadmap of project work that continuously improves security along many axes: efficiency, growth opportunities for the members of the team, etc.
* Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy's discretion, or otherwise applicable with local law.
Qualifications: Qualities that will help you thrive in this role are:* Must have a strong technical background. This role manages engineering teams and works with engineering counterparts and collaborators.
* You have experience aligning risk with strategy. You will work with the CISO to assess business unit risk appetites and prioritize the critical security risks and business enablements.
* You are a proven leader who will drive security awareness and security culture throughout Etsy and our subsidiaries. You will also act as a mentor for your team, and build a culture of growth and inclusion.
* You excel at all forms of communication. You will communicate technical issues to non-technical team members, and influence technical and legal partners across the globe.
Additional Information: What's NextIf you're interested in joining the team at Etsy, please share your resume with us and feel free to include a cover letter if you'd like. As we hope you've seen already, Etsy is a place that values individuality and variety. We don't want you to be like everyone else -- we want you to be like you! So tell us what you're all about.
Our PromiseAt Etsy, we believe that a diverse, equitable and inclusive workplace furthers relevance, resilience, and longevity. We encourage people from all backgrounds, ages, abilities, and experiences to apply. Etsy is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. If, due to a disability, you need an accommodation during any part of the interview process, please let your recruiter know. While Etsy supports visa sponsorship, sponsorship opportunities may be limited to certain roles and skills.
For U.S. roles only:Many Etsy roles are open to remote candidates, and you'll be able to identify which ones within the location header of each job description. We're open to remote hires from all U.S. states except Hawaii and Alaska.