Job Description

What’s the role?

We are looking for a security and privacy leader who believes that people come to work to do phenomenal things, and wants to build a security-by-design culture that allows for your team to continuously improve and share their craft.

As the Sr. Director of Information Security, you will help drive and mature the security culture across Etsy and its subsidiaries using a tech-first approach. You’ll build partnerships with engineering, marketing, legal, compliance, finance, and HR (amongst others) in a vision of making Etsy the most secure place to find unique goods. If you like the sound of that and want to foster a transparent enablement culture, this could be the perfect match!

This is a full-time position reporting to the VP of Engineering, CISO and the base salary range will be 277,000 - 359,000 USD per year. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and our competitive benefits that support you and your family as part of your total rewards package at Etsy. For this role, we are considering candidates based in the United States who are either remote, flex, or office-based. Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more about our flexible work options and workplace safety policies here.

What does the day-to-day look like?

• You will manage and grow an organization of over two dozen full-time team members responsible for: application security, infrastructure security, compliance engineering, risk engineering, and privacy engineering. Our security teams build and maintain critical security systems (e.g. our public facing authentication service, our internal alerting infrastructure), perform security assessments, and work closely with other teams to resolve issues and improve our security posture.
• You will be the primary security partner to other engineering organizations. At Etsy, we view security as a key partnership to the business tasked with raising and addressing risks, and to be successful you will need to partner with other team members and build effective engagement models that rationalize risk reduction.
• Drive critical strategic decisions related to our security effort. For example: build vs buy, where we invest resources in terms of preventative vs detective controls, and how we set and track goals on your team. You will champion accountability in a friendly and creative atmosphere.
• Ensure excellent execution of day to day responsibilities. You will hold managers accountable to a roadmap of project work that continuously improves security along many axes: efficiency, growth opportunities for the members of the team, etc.
• Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy’s discretion, or otherwise applicable with local law.

Qualifications

Qualities that will help you thrive in this role are:

• Must have a strong technical background. This role manages engineering teams and works with engineering counterparts and collaborators.
• You have experience aligning risk with strategy. You will work with the CISO to assess business unit risk appetites and prioritize the critical security risks and business enablements.
• You are a proven leader who will drive security awareness and security culture throughout Etsy and our subsidiaries. You will also act as a mentor for your team, and build a culture of growth and inclusion.
• You excel at all forms of communication. You will communicate technical issues to non-technical team members, and influence technical and legal partners across the globe.