SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Super.com is seeking a Head of Security to lead their security function as the most senior and accountable security leader. You will define and drive the security roadmap, staff and manage the security organization, navigate risks, ensure regulatory compliance, and deliver a safe and secure product to customers. You will report to the Senior Director of Infrastructure Engineering with direct access to the executive team and board.
You will lead a growing Security & IT organization responsible for IT, GRC, Product Security, and Corporate Security. The organization has two arms: a security engineering team (application and infrastructure security) reporting directly to you with technical leadership from a Staff engineer, and an IT & Compliance function (IT, GRC, Corporate Security) led by a Director who also reports to you. This team operates within the broader Infrastructure Engineering organization alongside Quality, Sales/Support Engineering, and DevOps/Platform functions.
Key responsibilities include: building out the security team through hiring engineers, GRC staff, and SOC partners; managing reports ranging from junior IC to Staff and Director level with mentorship; setting OKRs and broad strategic planning across security domains; maturing governance, risk, and compliance functions including control frameworks, automated evidence, policy lifecycle, and privacy obligations; championing an AI-first security program with AI-native vulnerability management and detection tooling; setting security culture through training, secure-by-default patterns, and developer enablement; ensuring product security through tool selection and team focus; providing technical direction on security architecture across Engineering; and being accountable to the board for overall security posture and risk acceptance.
Super.com is a fast-paced, high-growth fintech company built on K8s-based microservices with Python FastAPI backends and TypeScript React frontends, running on AWS with Postgres, Redis, Kafka, Elasticsearch, and Snowflake. The company uses modern AI development workflows with tools like Cursor, Claude, and internally built AI agents. You will play a deciding role in selecting and deploying new security tools as the stack evolves.
The company offers remote-first flexibility, unlimited PTO, company-wide recharge days, annual team offsites, weekly UberEats credits, travel discounts, generous parental leave, wellness budgets, personal development funds, and competitive salary with equity options.
REQUIREMENTS:
- 10+ years in security, including 4+ years leading a security function or major pillar, with experience managing managers/directors and senior technical leaders (Staff+)
- Owned company-level security strategy, budget, and outcomes end-to-end at a fast-paced technology company
- Hands-on history in at least two of: application/product security, infrastructure security, detection & incident response, enterprise IT & identity, or GRC
- Proven success supporting fast-paced software development teams at scale
- Stood up or scaled a GRC program including control frameworks, evidence automation, policy, and privacy program management; experience with SOX, GDPR, PCI, SOC2, and/or ISO27001
- Presented to and worked directly with a Board or Audit Committee, and with external auditors, regulators, or QSAs
- Experience with security risk quantification, acceptance, and translating technical risk into business impact for executive decision-making
- Strong track record hiring security professionals and developing engineers into technical and people leaders
- Direct professional experience with and notable outcomes from driving AI transformation in security, engineering, and/or IT organizations
