Chief Information Security Officer

About the Role

Glean is seeking a Chief Information Security Officer (CISO) to lead security for Glean as a company and for our core product. Reporting to the CTO, you will set the strategy and operating model across product and platform security, corporate security, detection and response, risk, and compliance, turning that strategy into measurable risk reduction.

This is an executive role for a leader who combines technical judgment with strong organizational leadership. You will partner closely with Engineering, Product, Legal, IT, and company leadership to make sound security decisions at the pace of an AI company. You should be able to go deep on architecture and incidents, build a durable program, and communicate clearly about risk and trade-offs.

You will

• Set a risk-based security strategy, priorities, policies, metrics, and decision-making mechanisms that scale with Glean’s business. Give executives a clear view of material risks, remediation progress, and decisions that require business ownership, with a clear operating cadence to ensure risks are visible, owned, prioritized, and reduced.
• Partner with Engineering and Product to build security into architecture, design, development, release, and operations. Guide security across application and platform layers, identity and authorization, customer-data flows, cloud environments, integrations, and AI-enabled capabilities, including models, agents, and the tools and data they can access.
• Lead a measurable vulnerability-management and secure-development program spanning threat modeling, code and dependency risk, software supply-chain security, penetration testing, bug bounty, remediation ownership, and validation. Use automation and AI-assisted analysis thoughtfully to increase coverage and shorten time to fix.
• Oversee security for corporate systems, identity, endpoints, SaaS applications, cloud infrastructure, and privileged access. Partner with IT and technical owners to improve preventive controls, monitoring, and operational resilience.
• Ensure the organization can detect, assess, contain, recover from, and learn from security incidents. Clarify escalation and decision paths; coordinate with Engineering, Legal, Privacy, Communications, and business leaders; and ensure corrective actions are completed and validated.
• Own security risk management, compliance strategy, audit readiness, and control effectiveness. Support frameworks and customer or regulatory requirements relevant to Glean’s business, which may include SOC 2, ISO 27001, HIPAA, PCI, and FedRAMP. Track meaningful outcomes in risk reduction, vulnerability remediation, incident readiness, and control effectiveness.
• Build and grow a high-performing team across security engineering, enterprise security, detection and response, and governance. Set clear ownership, develop technical and people leaders, and create an environment where teams can execute with focus and accountability.
• Build strong working relationships across the company, helping teams understand practical safeguards and make informed risk decisions without unnecessary friction. Partner with customer-facing security leaders on escalations and assurance needs. Contribute security expertise to commercial security products in partnership with their Product and business owners; those teams retain ownership of their product roadmaps.

About you

• Senior security leadership experience with accountability for a broad, enterprise-scale security program at a high-growth technology or product company. Experience as a CISO, deputy CISO, or senior security executive is strongly preferred.
• Strong technical depth across product and application security, cloud and infrastructure security, identity and access management, secure development, and vulnerability management. You can engage credibly with senior engineers on architecture and remediation choices.
• Experience building and operating effective security, detection, and incident-response programs, including leading through high-severity incidents and ensuring lessons result in durable improvements.
• Practical expertise in security risk management, governance, compliance, and audit readiness, with the judgment to distinguish control completion from actual risk reduction.
• A track record of partnering with Product and Engineering to ship secure products and embed security in fast-moving development organizations.
• Experience building, leading, and retaining strong multidisciplinary teams; setting priorities; allocating resources; and creating clear accountability across teams.
• Excellent executive communication and judgment. You can explain technical issues and uncertainty plainly, recommend a path forward, and escalate material risk at the right time. You bring a collaborative, pragmatic leadership style that earns trust while holding a high bar for security outcomes.
• Especially valuable: Experience securing enterprise AI, machine-learning, LLM, or agentic systems, including data handling, model and application boundaries, tool access, and adversarial testing; using automation or AI-enabled techniques to improve security analysis, detection, investigation, or remediation; supporting regulated customers or programs such as FedRAMP; or preparing a company for public-company or IPO-level governance and disclosure expectations.

Location

• This role is hybrid (4 days a week in our San Francisco Bay Area office).

Compensation & Benefits

The standard base salary range for this position is $424,300 - $489,400 annually.

Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience.

Certain roles may be eligible for variable compensation, equity, and benefits.

We offer a comprehensive benefits package including competitive compensation, Medical, Vision, and Dental coverage, generous time-off policy, and the opportunity to contribute to your 401k plan to support your long-term goals.

When you join, you'll receive a home office improvement stipend, as well as annual education and wellness stipends to support your growth and wellbeing.

We foster a vibrant company culture through regular events, and provide healthy lunches daily to keep you fueled and focused.

We’re committed to building and sustaining a diverse, inclusive workplace. We strive to attract and retain people with a wide range of backgrounds, experiences, and perspectives, and we do not discriminate on the basis of gender, ethnicity, sexual orientation, religion, civil or family status, age, disability, or race.

#LI-HYBRID