Full-Time Chief Information Security Officer

Supabase is a remote company building developer tools for databases. We are looking for an experienced Chief Information Security Officer (CISO) to lead and improve the security of our hosted cloud offering.

We manage over 1 million Postgres databases for our users and are growing fast. Securing user data is paramount to maintaining trust.

Responsibilities:

1. Security engineering: Improve product security through security evaluations and lifecycle integration.
2. Security as a Product: Design and develop platform security features (firewalls, audit logs, alerting, etc.).
3. Security Training: Enhance security culture through simulations and workshops.
4. Governance and compliance: Adhere to regulations (GDPR, PCI DSS, SOC2, HIPAA).
5. Incident response: Mitigate attacks and operationalize incident response.
6. Security Automation: Streamline processes with MDM, SIEM, and other tools.
7. Security expert: Act as the security expert in customer conversations.
8. Risk management: Identify and mitigate risks through assessments and training.

Requirements:

• Passion for security and building trust through strong practices.
• 4+ years experience as a CISO or equivalent.
• Comfortable with remote work and collaboration.
• Proven success scaling security programs within B2B SaaS companies.
• Experience in developer tools or platform companies is a plus.
• Excellent communication skills (technical and non-technical).

Benefits:

• 100% remote work, no location-based adjustments.
• Autonomous work style.
• Comprehensive health, vision, and dental benefits.
• Generous tech allowance for setup.
• Annual education allowance and off-sites.

About the team:

• Start-up environment, globally distributed team.
• Focus on collaborative open-source practices.
• Extensive experience in founding and scaling startups.

Process:

• Entirely remote process.
• Application review, short screening interviews.
• Up to four follow-up interviews with founders and team members.
• Potential follow-up questions or direct offer.

What is the last date for applying to the job?

Which countries are accepted for this remote job?