• Own and evolve the company’s security and privacy strategy • Scale and mentor the Security team, developing great security team members as the company grows. • Build and mature the company’s security framework, balancing pragmatism and rigor across system security, application security, infrastructure security, and device security. • Lead security operations and incident response, ensuring the company can rapidly detect, respond to, and recover from threats. • Oversee compliance programs (e.g., SOC 2, GDPR, CPRA) and maintain a continuous improvement mindset beyond checkbox compliance. • Partner with Engineering and Product to embed security into the SDLC, CI/CD pipelines, and IoT device lifecycle. • Establish and maintain relationships with key stakeholders, such as executive leadership, providing actionable metrics and insights into security posture, risk trends, and emerging threats. • Oversee vendor risk management and ensure robust controls across third-party services and integrations. • Conduct regular security awareness training and education programs for employees. • Evaluate and select security technologies and tools to enhance the organization's security posture. • Build a strong security culture, from awareness and education to clear policies and positive engagement across all teams. • Optimize the security budget and make pragmatic tradeoffs that balance protection, velocity, and business impact.