Apptronik

Director of Enterprise Security

Austin, TX. Posted 9 days ago

The role

The Director of Enterprise Security will build and lead the enterprise information security program. This person will own risk management and governance frameworks to drive the company toward ISO 27001 certification while protecting corporate systems, data, identities, and SaaS estate.

What you will do

  • Define and own enterprise information security strategy, roadmap, and policies
  • Design, implement, and operate an ISO 27001-aligned Information Security Management System
  • Own information security risk management and establish risk registers
  • Build and run the security governance program
  • Operate the SOC 2 program in parallel with ISO 27001
  • Establish enterprise security architecture across cloud, SaaS, and endpoints
  • Build and run vulnerability management, threat detection, and incident response capabilities
  • Own identity and access management governance
  • Establish third-party security risk management and vendor security review processes
  • Drive security awareness and training programs

Required qualifications

  • 12+ years of progressive information security experience
  • 5+ years leading enterprise security programs as a Director, Head of Security, or senior security leadership role
  • Deep, demonstrated fluency with ISO 27001
  • Track record of building enterprise security programs from the ground up and driving ISO 27001 certification
  • Strong expertise in risk management and governance
  • Strong working knowledge of NIST CSF, NIST 800-53, CIS Controls, GDPR, and CCPA
  • Hands-on architectural depth across cloud platforms (AWS, GCP, and/or Azure)
  • Strong identity and access management expertise
  • Endpoint and corporate IT security experience across Linux, macOS, and Windows
  • Experience operating detection and response capabilities
  • Ability to translate framework requirements into pragmatic, well-prioritized controls
  • Excellent written and verbal communication skills

Nice to have

  • Industry certifications such as CISSP, CISM, CISA, CCSP, ISO 27001 Lead Implementer or Lead Auditor
  • Experience leading enterprise security at a hardware, robotics, manufacturing, automotive, or aerospace company
  • Experience with GRC platforms (e.g., Vanta, Drata, OneTrust, ServiceNow GRC)
  • Experience with additional frameworks such as NIST CSF audits, HITRUST, PCI-DSS, or TISAX
  • Experience operating in environments subject to ITAR/EAR export controls or working with U.S. government / defense customers
  • Prior experience scaling a security and GRC team from individual contributor to multi-discipline organization
  • Bachelor's degree in Computer Science, Information Security, Engineering, or a related field
  • Master's degree (e.g., MS in Information Security, MBA with security focus)
  • Active senior security certifications (CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, GIAC)

About the company

Apptronik is a human-centered robotics company developing AI-powered robots to support humanity in every facet of life. Their flagship humanoid robot, Apollo, is built to collaborate thoughtfully with people in industries such as manufacturing and logistics.

Director of Enterprise Security at Apptronik | JobZoey