Compensation: Base Salary, Bonus, Stock Options, Medical
Why This Role Exists
Innovapptive has zero security engineering today. 59 enterprise customers across regulated industries. Customers asking for SOC 2 compliance, pen test reports, security posture documentation. We have none.
You are the founding security hire. Build Security & Compliance from scratch: GRC, AppSec pipeline, vulnerability management, security culture. Hire and lead a 3-person team.
What You Own
- Security program from zero: GRC framework, risk register, policies, vendor assessments.
- SOC 2 Type II readiness.
- AppSec pipeline: SAST/SCA in CI/CD. 100% repo coverage.
- Vulnerability management: 95% Crit/High resolved within 7/30 days.
- Security review for high-risk changes.
- Incident response playbook.
- Security awareness and training.
- Team building: AppSec Engineer now, Infra/Cloud in Q3.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.