About us:  

Limeade is an employee experience software company on a mission to transform work into a source of positivity, energy, humanity, and purpose. Founded in 2006, Limeade is a pioneer in the HR technology industry and is consistently recognized for its own award-winning culture. Today, Limeade solutions are used in approximately 100 countries around the globe. We help every employee know their company cares - and deliver people and business results that matter. Limeade partners with its customers to transform the overall employee experience by helping to improve employee well-being, engagement, and sense of inclusion - in addition to reducing the risk of unwanted turnover and burnout. To learn more, visit www.limeade.com (AXS listing: LME)

About the Job:

We are looking for someone to continue enhancing our overall security posture, earn and foster trust between Limeade and our customers as well as our internal business units, positively influence change in a rapid environment, and protect our environments from growing, never-ending threats faced in our digital world as a SaaS solution. The Director of Security and Operations is responsible for overseeing the enterprise-wide vision, strategy, architecture, and policies and programs on information security, production operations, and corporate operations for our growing SaaS company. This role will manage a team of security professionals as well as site reliability engineers. The person will need to be comfortable moving between strategy and getting their hands dirty with daily operations. The team works closely with Product Development, Legal, Sales, Customer Success, and Customer Operations teams to ensure security matters are addressed around security reviews, risk assessment, vendor management, and implementing/recommending security tools and processes to protect Limeade.

Responsibilities:

• Evangelize security to C-level, individual contributors, and customers using technical and business soft skills.
• Analyzes and predicts trends and develops long-range plans designed to maintain the cost effectiveness and completeness of the enterprise’s infrastructure. Brings a current knowledge and future vision of infrastructure technology and systems and best practices as related to the needs of the business.   
• Works with department executives and functional area management to define infrastructure support initiatives and solutions for improving service efficiency and effectiveness in areas including platform architecture, data storage, data centers, monitoring and reporting and business continuity planning for disaster recovery, etc.
• Establishes metrics, key performance indicators, and SLAs.
• Understand and implement regulatory compliance practices as it relates to security and privacy.
• Manage technical third-party audits (SOC2 Type2, ISO 27001, penetration and vulnerability testing tests, etc.).
• Lead the cross-company Security Steering Committee.
• Lead IT security policy and procedure creation, modification, implementation, and enforcement.
• Document existing processes and procedures and the ability to create useful diagrams by interrogating teams of all technical skill levels.
• Oversee completion of request for proposals (RFPs) and being able to meet with potential customers to discuss Limeade security posture and standards.
• Develop security training program for Sales team to use to sell Limeade Security.
• Oversee operations of dedicated security technology tools.
• Manage server, cloud, and desktop hardening procedures and baselines to ensure consistent implementation and updates.
• Participate in security and data breach incident response leadership, development, and testing.
• Partner with Legal team to review contracts and proposals for security, privacy, and technical requirements.
• Help lead our vendor management program as it relates to IT and Security controls.
• Managing and developing a strong information security and site reliability engineering team.

Desired Skills & Experience

• Ability to demonstrate our values in an on-going and consistent way
• Excellent leadership, teamwork and collaboration skills while being results-oriented, high energy, self-motivated with excellent attention to detail
• Experience with service-oriented architectures and web services security
• Well versed in application security, infrastructure security, business risk analysis and making complex business/risk trade-off recommendations and decisions
• Technical knowledge in at least two security domains such as engineering, system and network security, authentication or security protocols.
• Hands-on knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
• Strong information security risk-based prioritization abilities
• Fundamental understanding of intersections between security and auditing/compliance, specifically around SOC reporting and/or ISO:27001
• 10+ years of progressive experience within a software security team or similar operating environment
• 5+ years of experience leading, managing & developing high performance teams
• BA/BS in computer science, information security, related discipline, or equivalent work experience

Limeade provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Limeade will provide reasonable accommodations for qualified individuals with disabilities.

#li-remote