Lead Stord’s enterprise security function and build its long-term strategy, governance, operations, engineering, application and cloud security capabilities. Own NIST, SOC 2 and ISO programs, 24/7 detection and response, incident management, M&A security integration, secure product development, penetration testing, customer trust, business continuity and disaster recovery. Lead the security team, MDR partnership, executive and board communications, AI governance, and security readiness for international growth, acquisitions and potential public-market scrutiny.
ABOUT STORD
Stord is The Consumer Experience Company, powering seamless checkout through delivery for today's leading brands. Stord is rapidly growing and strategically scaling teams across the entire company, and seeking energetic experts to help us achieve our mission.
By combining comprehensive commerce-enablement technology with high-volume fulfillment services, Stord provides brands a platform to compete with retail giants. Stord manages over $10 billion of commerce annually through its fulfillment, warehousing, transportation, and operator-built software suite including OMS, Pre- and Post-Purchase, and WMS platforms. Stord is leveling the playing field for all brands to deliver the best consumer experience at scale.
With Stord, brands can increase cart conversion, improve unit economics, and drive sustained customer loyalty. Stord’s end-to-end commerce solutions combine best-in-class omnichannel fulfillment and shipping with leading technology to ensure fast shipping, reliable delivery promises, easy access to more channels, and improved margins on every order.
Hundreds of leading DTC and B2B companies like True Classic, Native, Seed Health, goodr, Sundays for Dogs, and more trust Stord to deliver industry-leading consumer experiences on every order. Stord is headquartered in Atlanta with facilities across the United States, Canada, and Europe. Stord is backed by top-tier investors including Kleiner Perkins, Franklin Templeton, Founders Fund, Strike Capital, Baillie Gifford, and Salesforce Ventures.This is a build role, not a maintain role. You'll inherit a real foundation — SOC 2 Type II attestation across our core platforms, a public Trust Center, EU-U.S. Data Privacy Framework certification, and a small, capable team — and you'll own what comes next: the strategy, the team, the technical stack, and the operating rhythm that carry Stord through international expansion, continued M&A, AI deployment across the product, and eventual public-market scrutiny.What You'll Own
Stord is The Consumer Experience Company, powering seamless checkout through delivery for today's leading brands. Stord is rapidly growing and strategically scaling teams across the entire company, and seeking energetic experts to help us achieve our mission.
By combining comprehensive commerce-enablement technology with high-volume fulfillment services, Stord provides brands a platform to compete with retail giants. Stord manages over $10 billion of commerce annually through its fulfillment, warehousing, transportation, and operator-built software suite including OMS, Pre- and Post-Purchase, and WMS platforms. Stord is leveling the playing field for all brands to deliver the best consumer experience at scale.
With Stord, brands can increase cart conversion, improve unit economics, and drive sustained customer loyalty. Stord’s end-to-end commerce solutions combine best-in-class omnichannel fulfillment and shipping with leading technology to ensure fast shipping, reliable delivery promises, easy access to more channels, and improved margins on every order.
Hundreds of leading DTC and B2B companies like True Classic, Native, Seed Health, goodr, Sundays for Dogs, and more trust Stord to deliver industry-leading consumer experiences on every order. Stord is headquartered in Atlanta with facilities across the United States, Canada, and Europe. Stord is backed by top-tier investors including Kleiner Perkins, Franklin Templeton, Founders Fund, Strike Capital, Baillie Gifford, and Salesforce Ventures.This is a build role, not a maintain role. You'll inherit a real foundation — SOC 2 Type II attestation across our core platforms, a public Trust Center, EU-U.S. Data Privacy Framework certification, and a small, capable team — and you'll own what comes next: the strategy, the team, the technical stack, and the operating rhythm that carry Stord through international expansion, continued M&A, AI deployment across the product, and eventual public-market scrutiny.What You'll Own
Strategy and governance.
Set the security strategy and the multi-year roadmap. Run our program against NIST CSF 2.0 and expand audit scopes and certifications. Establish AI governance across our models, agents, and Stord Labs work.Security operations.
Stand up 24/7 detection and response, initially through an MDR partnership, and progressively bring detection engineering in-house. Own incident response end to end — playbooks, on-call, tabletop exercises with the executive team, and the postmortems that actually change something.Security engineering.
Build and operate the technical stack: SIEM/SOAR, EDR/XDR, cloud security posture management, API security, secrets management, and vulnerability management. Harden CI/CD across a 200+ person engineering organization — signed commits, SBOM generation, dependency and secrets scanning, SAST/DAST in the pipeline.M&A security integration.
Stord acquires companies, and every deal brings inherited systems, credentials, and technical debt. You'll own security diligence on future targets and the integration playbook that gets acquired environments to our standard on a predictable timeline.Product and customer trust.
Partner with Product and Engineering on secure-by-default design across Logistics, Brands, and Commerce. Own penetration testing and our bug bounty program. Be the executive voice in enterprise security reviews and questionnaires — the ones that decide whether a deal closes this quarter or next.Resilience.
Own business continuity and disaster recovery for an operation where downtime means orders don't ship. Prove recovery works by testing it, not by documenting it.Team.
Lead and grow a team spanning GRC, security operations, security engineering, application security, and cloud/infrastructure security, plus an MDR partner. You'll inherit the existing team, then define and hire the rest of the structure yourself.What We're Looking For- 12+ years in security, including 5+ leading a security function at a SaaS or platform company.
- Depth in cloud-native security at scale — AWS/GCP, Kubernetes, microservices, CI/CD, API security. You should be able to hold your own in an architecture review, not just read the summary.
- Hands-on experience owning M&A security diligence and integration.
- Track record building a security program against NIST CSF, SOC 2, and ISO 27001 — and passing the audits.
- Experience standing up or running 24/7 detection and response, whether in-house, through MDR, or a hybrid.
- Executive and Board communication chops. You can explain residual risk to a board, a trade-off to a CFO, and a control to an engineer, and be understood by all three.
- Judgment about where to spend. You know which risks justify a control, which justify a conversation, and which justify neither.
- You've taken a company through IPO readiness, or operated in a public company — SEC cybersecurity disclosure, SOX IT controls, Board reporting cadence.
- You've secured operational or physical environments — warehouses, manufacturing, robotics, OT/IoT — not just cloud.
- You've built AI/ML security governance for production systems, ideally against NIST AI RMF.
- EU/UK regulatory experience: GDPR, DPF, NIS2, the EU AI Act.
- You've worked somewhere the physical world breaks when software fails.
Similar Jobs
Artificial Intelligence • Fintech • Software • Travel
The VP of Security will lead Engine’s security strategy, engineering, operations, AI security, corporate IT, and enterprise trust. Key priorities include building an AI security function, securing agent identities and AI gateways, leading AppSec, SecOps, and CloudSec, strengthening identity and access controls, managing corporate IT, supporting SOC 2 and PCI controls, and representing security to executives, the board, and enterprise customers.
Top Skills:
AppsecAWSCcpaCloudsecCspmDlpEdrGdprMcpOktaPciRbacSalesforceSIEMSoc 2Vdi
9 Days Ago
Information Technology • Security • Cybersecurity
Leads Parsons’ National Security & Operations business development strategy, sales performance, pipeline development, capture execution, and customer engagement across defense, intelligence, and cyber markets. The VP owns bookings and growth outcomes, leads BD and capture teams, builds strategic customer relationships, guides large government pursuits, and aligns cross-functional stakeholders to win major contracts and expand existing business.
Top Skills:
Air And Missile DefenseC5IsrComplex Systems IntegrationCybersecurityJoint/Coalition C2Next-Generation Command And Control (Ngc2)Pai/OsintPlatform IntegrationRadar And Sensing ArchitecturesTactical Network Integration
Fintech • Real Estate
The VP and CISO will establish and lead the enterprise information security program, define security strategy and roadmap, oversee security architecture, policies, compliance, risk management, third-party partners, and security operations. The role advises executives and the Board, manages distributed security teams, engages regulators and auditors, and translates cybersecurity risks into strategic business decisions.
Top Skills:
AWSAzureDevsecopsGCPGlba Safeguards RuleIso 27001ExcelMicrosoft Office SuiteMicrosoft WordNist CsfPci DssSoc 2
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
