SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Togal.AI is seeking a Director of Security to build and own the company's security and compliance function from the ground up. This is Togal's first dedicated security hire, with full mandate to establish processes, policies, and tooling as you see fit.
Key responsibilities include:
- Own the SOC 2 Type II compliance program end-to-end, including evidence collection, audit management, and control ownership using Vanta or similar tools. Ensure the program is audit-ready year-round.
- Serve as Togal's primary security contact for customers and prospects. Lead security conversations with customer CISOs and security teams during deal cycles and MSA negotiations. Turn around customer security questionnaires and vendor security reviews quickly and accurately.
- Design and implement a formal incident-response and notification policy with clear triggers, timelines, escalation paths, and defined roles. Lead incident response when incidents occur, including containment, investigation, and coordination of external resources (MDR/IR retainers as needed).
- Assess and improve cloud security posture (IAM, configuration, logging) in partnership with the CTO and engineering team.
- Evaluate security monitoring options (managed detection, SIEM) to determine whether to buy, outsource, or build capabilities.
- Partner with Legal and the CEO on breach determination and external communication processes.
Required qualifications: End-to-end SOC 2 or similar compliance program experience with audit management and tooling. Proven ability to lead customer-facing security conversations at the CISO level. Solid cloud security fundamentals (IAM, configuration management, logging). Hands-on technical depth to lead incident response and investigation. Comfort operating independently at an early-stage company, building the function from scratch.
Nice-to-haves: Experience standing up security/trust functions at startups or scale-ups. Background in construction tech or B2B SaaS. Familiarity with email authentication (DKIM/SPF/DMARC) and phishing/account-compromise forensics. Experience managing MDR/IR retainer relationships.
Togal.AI is an AI-powered cloud platform for the construction industry, founded by construction experts. The platform automates pre-construction takeoff tasks using machine learning, helping estimators work up to 80% faster while reducing errors.
