Head of Security
About Super.com
We started Super.com to help maximize lives–both the lives of our customers and the lives of our employees– so that everyone can experience all that life has to offer. For our employees, our promise is that Super.com is more than just a job; it’s an opportunity to unlock one’s potential, where learning is celebrated and impact is realized.
We are more than a fast-paced, high-growth tech company; we care about our people and take career progression seriously. This is your career and our aim is to supercharge it through the people, the work, and the programs that fuel who we are.
About the role
As the Head of Security at Super.com, you'll be our most senior and accountable security leader. You'll define and drive our security roadmap, staff and manage our security function, navigate our risks, ensure regulatory compliance, and help us deliver a safe and secure product to our customers. You'll report to our Senior Director of Infrastructure Engineering, and work closely with leaders across Legal, Data, Engineering, Product, Finance and HR while maintaining direct access to our executive team and board. Expect high autonomy, frequent collaboration, a fast pace, and reliance on your own initiative. You'll leverage your years of technology leadership experience to define what success looks like, and to align your organization's outcomes closely with company-level objectives. This is a strategic and technical role that requires scaling your impact across AI tools, team leadership, cross-functional partnerships, and individual contributions.
About the team
Reflecting our rapid growth, Super.com is actively expanding our security function. This Security & IT organization is responsible for IT, GRC, Product Security and Corporate security. This organization has two arms: A security engineering team covering application and infrastructure security reports to you directly, with day-to-day technical leadership from a Staff engineer. An IT & Compliance function covering IT, GRC, and Corporate Security is led by a Director who also reports to you. This team exists within the broader Infrastructure Engineering organization alongside the Quality, Sales/Support Engineering, and DevOps/Platform functions. This is a fast-paced team with broad scope, high autonomy, and close collaboration across other departments.
What you’ll be working on
Building out the team: You'll lead hiring for engineers, GRC staff, and SOC partners.
You'll manage reports ranging in experience from junior IC to Staff and Director level, providing mentorship and directing them toward impactful opportunities.
Own OKR setting and broad strategic planning across Security related domains
Mature our governance, risk, & compliance functions, including: Expanding our control framework with automated evidence, policy lifecycle, risk management, and managing privacy obligations in partnership with Legal.
Champion an AI-first security program: direct the continued build-out of our AI-native vulnerability management and detection tooling, provide safety while the company adopts AI, and use AI to scale the team’s output well beyond its headcount.
Set the security culture: training, secure-by-default patterns, developer enablement, and clear expectations so every team ships securely without waiting on Security.
Ensure our customers are protected and our product is secure through experienced tool selection, organization structure, and well directed security team focus.
Provide technical direction and final say on security architecture across Engineering
You'll be accountable to the board for overall security posture and risk acceptance
What we’re looking for
10+ years in security, including 4+ years leading a security function or major pillar, and experience managing managers/directors and senior technical leaders (Staff+).
Owned company-level security strategy, budget, and outcomes end-to-end at a fast-paced technology company
Hands-on history in at least two of: application / product security, infra security, detection & incident response, enterprise IT & identity, and GRC.