Information Security Lead

Rox Data Corp • San Francisco, CA

1d

About The Position

Rox is building the AI-native revenue operating system for modern go-to-market teams. Backed by Sequoia, GV, and General Catalyst, we’re working with some of the most ambitious enterprise teams to replace fragmented CRM workflows with intelligent, autonomous systems. Rox connects data across the GTM stack, deploys AI agents to do real work, and gives revenue leaders a clear, shared picture of what actually drives outcomes.
We’re a small, fast-moving Series A team taking on one of software’s most entrenched categories — and we’re winning by combining deep technical rigor with obsessive focus on usefulness.
About Security at Rox
Security at Rox is not a compliance afterthought — it’s a product and trust enabler. Our customers trust us with sensitive revenue data, workflows, and AI-driven decision systems, which means security must be thoughtfully designed into everything we build.
Today, security is owned collaboratively across Engineering, Platform, and Leadership. This role exists to centralize ownership, raise the bar, and ensure Rox scales with a security posture that customers, partners, and auditors can trust.
About the Role
This is a founding Information Security Lead role for someone who wants real ownership.
You will be responsible for defining and executing Rox’s information security strategy end-to-end — from cloud infrastructure and application security to policies, audits, and incident response. While this role is hands-on today, it is also a leadership role: you’ll establish the foundations, set standards, and help determine how and when the security function scales.
You’ll work closely with Engineering, Product, and Leadership to ensure security enables velocity rather than blocking it — and that Rox earns trust without slowing down.

Requirements

• Experience leading information security or security engineering efforts in B2B SaaS environments
• Strong understanding of cloud security, application security, and modern infrastructure
• Hands-on experience with compliance frameworks (e.g., SOC 2) and audit processes
• Ability to partner effectively with Engineering and Product teams
• Comfort operating in fast-moving, ambiguous environments
• Strong judgment and the ability to balance security rigor with execution speed
• Clear communication skills, especially when explaining risk and tradeoffs

Responsibilities

• Own Rox’s information security program end-to-end
• Design and implement security architecture across cloud infrastructure, applications, and data systems
• Establish and maintain security policies, controls, and best practices
• Partner with Engineering to embed security into development workflows and system design
• Lead compliance efforts (e.g., SOC 2), including audits, documentation, and ongoing readiness
• Define incident response processes and act as the primary owner during security events
• Assess risk proactively and communicate tradeoffs clearly to leadership
• Help determine how the security function scales — including future hires, tooling, and process

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed