Head of Security

Summary

Join Crisis Text Line as their Head of Security and lead the development and implementation of a comprehensive security strategy across the company, service, and software platform. You will be responsible for protecting our operations, software, data, and ensuring compliance with global information security standards. This role involves managing a team of security professionals, conducting risk assessments, developing incident response plans, and overseeing security operations. You will collaborate with various teams to ensure platform security and foster a culture of security awareness. The ideal candidate possesses extensive experience in information security, leadership, and a deep understanding of cybersecurity trends. Crisis Text Line offers a competitive salary and a robust benefits package.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent work experience
• 10+ years of experience in information security, including at least 5 years in a leadership role
• Direct experience at companies shipping software platforms to customers
• Proven experience in developing and implementing security strategies
• In-depth knowledge of cybersecurity trends, threats, and mitigation strategies
• Excellent leadership, communication, and organizational skills
• Experience with security technologies and cloud security solutions
• Experience in organizations which need to comply with SOC2, HIPAA, and GDPR etc
• Reliable High-Speed Internet Required: Must have a stable high-speed internet connection to support seamless remote collaboration, virtual meetings, online job tasks, etc

Responsibilities

• Develop and implement a strategic, long-term information security plan that aligns with business goals
• Design, implement, and maintain a comprehensive security program to safeguard corporate assets, infrastructure, and data
• Lead a team of security professionals, including hiring, training, mentoring, and evaluating staff
• Establish and enforce security policies, standards, and guidelines for IT systems
• Work closely with executive management to determine acceptable levels of risk
• Conduct risk assessments to identify security vulnerabilities and threats, and prioritize mitigation efforts
• Develop incident response plans, including strategies for communication, investigation, and resolution
• Lead the organization’s response to security incidents and breaches
• Oversee the monitoring and analysis of potential security threats and vulnerabilities
• Implement and manage security tools, such as firewalls, intrusion detection systems, anti-virus software, and authentication systems
• Ensure the security of cloud services, data centers, network infrastructure, and end-user devices
• Conduct regular security audits, penetration testing, and vulnerability assessments
• Develop and deliver security training programs for employees at all levels
• Foster a culture of security awareness and encourage proactive incident reporting

Benefits

• 20 paid holidays including: Federal holidays like Juneteenth and Labor Day, Election day, Holiday break from Dec 24 through January 1, 2 renewal days, 2 floating holidays
• Flexible paid time off, including: 15 vacation days, 3 personal days, 7 sick days
• Medical, dental, and vision benefits for the staff member and family at no cost to the employee
• 403B retirement plan (the nonprofit equivalent of a 401K): 3% contribution by Crisis Text Line to support building financial wellness, regardless of personal contribution
• 12 weeks paid parental leave (after 6 months of employment)
• Student loan repayment (after 2 years of continuous full time service)
• Family support through a virtual childcare platform
• Stipends/Allowances: Mental health (Monthly), Internet Service (Monthly), Professional Development (Annual), Wellness (Annual), Home office setup (One time/First year)