T

Turo

Platform for peer-to-peer car rentals

Manager, Information Security

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeSan Francisco, CA, USA

About the Job

Requirements

  • A bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
  • At least 10 years of experience in enterprise security, focused on Zero Trust architecture, Advanced Email Security, Data Loss Prevention, Endpoint Security, and Infrastructure as Code or configuration management.
  • At least 2 years of experience managing or leading a team of security engineers.
  • Strong knowledge of identity governance frameworks, SaaS security, and SOX and SOC 2 compliance, with experience in Incident Response and advanced threat detection methodologies.
  • Proficiency in scripting and automating security processes using Python, PowerShell, or similar languages.
  • Experience working on cloud infrastructure, especially AWS and its security services, with an understanding of containerized environments and familiarity with GitOps flow.
  • Strong presentation, facilitation, and written and verbal communication skills to interface across organizational levels and influence stakeholders.

Responsibilities

  • Provide technical and strategic leadership for the Enterprise Security team, managing, mentoring, and supporting team members' career development.
  • Define strategy and oversee implementation of enterprise Zero Trust security frameworks, focusing on continuous verification and least-privilege access models.
  • Direct the development and management of Advanced Email Security, Data Loss Prevention, Insider Threat prevention, and Endpoint Security solutions.
  • Collaborate with Identity and Access Governance teams to define policy and ensure secure, efficient access control policies are enforced.
  • Ensure ongoing compliance with SOX and SOC 2 standards, including regular audits and gap assessments.
  • Direct Security Awareness Training programs and security phishing campaigns for employees.
  • Drive adoption and deployment of Infrastructure as Code to automate security configurations and infrastructure, specifically using Terraform.
  • Manage and lead Incident Response efforts, including automation playbooks and SOC collaboration, and identify, assess, and mitigate security risks.
  • Establish a robust SaaS Security Posture and collaborate with cross-functional teams to integrate security throughout the Software Development Life Cycle.
  • Lead the annual penetration test and annual security tabletop exercise.

Desired Qualifications

  • Industry certifications such as CISSP, CISM, CEH, or GIAC are a plus.
  • Experience with SOAR tools such as Tines is preferred.

About the Company

Turo

Platform for peer-to-peer car rentals

Turo is a peer-to-peer car rental marketplace that connects people who need a vehicle with local hosts who share theirs. Guests search by location, dates, price, and vehicle type, then book from a catalog of 1,600+ makes and models in the Turo app, with pickup, delivery, and in-app messaging handling the process. Hosts set prices and availability, can offer delivery and extras, and choose an earnings plan; trips include liability insurance and optional protection plans, plus 24/7 support. The company earns by taking a share of trip prices and collecting guest fees and protection plans as its revenue.

Company size
1,001-5,000
Company stage
Late Stage VC
Total funding
$499.3M
Headquarters
San Francisco, CA
Founded
2009

Recently Posted Jobs

Explore more opportunities at Turo

See more jobs