Director of Security

About Harry’s 

Harry’s Inc. started in 2013 with a specific goal: disrupt the shaving industry by creating an innovative, everyday product at a fair price. Since then, Harry’s has expanded to Canada and Europe, developed relationships with retailers such as Target and Walmart, expanded our grooming brand into a personal care powerhouse, launched two new brands including Flamingo and Cat Person, and made our first brand acquisition with Lumē. 

The key to our success? Our amazing people. From chemists, mechanical engineers, CX associates, to creative directors, sourcing managers, and logistics specialists, the Harry’s team is composed of some of the most brilliant, diverse, and humble people you’ll ever meet. 

Our brands answer unmet consumer needs, but our company is a place of inclusion and innovation that attracts some of the brightest minds across industries, geographies, and backgrounds. Whether we have a team of 5 or 500, our core values and our startup mentality remain; we value continuous improvement and learning, teamwork and collaboration, creative problem solving, and open and direct dialogue and feedback.

 

Harry’s is operating as a hybrid-first environment - for us, that means that we ask folks to come into our beautiful, 70,000 square foot SoHo office a minimum of 2 days per week, with flexibility to choose exactly which days work best for you.  What will you get out of that?  Bagels on Wednesdays and lunch on Thursdays, and fully stocked kitchens with snacks, coffee, and drinks everyday.  Can’t forget the free products and the opportunity to have some meetings without Zoom (remember what 2019 was like?)

#BI-Hybrid
#LI-132397471_HS1 

 

Director of Security 

The Director of Security will be responsible for developing, implementing, and managing all aspects of our company's security program. The successful candidate will play a crucial role in safeguarding our organization against physical and cyber threats, ensuring the integrity of our operations, and maintaining a safe environment for our employees and customers.

 

What you will accomplish:

• Develop and implement a comprehensive security strategy that aligns with the company's goals and objectives.
• Lead, mentor, and manage a team of two (Infrastructure Security Engineer & Corporate IT Security Engineer)
• Collaborate with IT and engineering teams to establish and maintain robust information security protocols, including data protection, risk assessments, and incident response.
• Develop and enforce security policies, procedures, and standards to ensure compliance with industry regulations and best practices.
• Continuously assess and analyze security risks, emerging threats, and vulnerabilities to proactively mitigate potential issues.
• Promote security awareness and training programs for all employees to enhance their understanding of security best practices.
• Manage relationships with security service providers, contractors, and technology vendors to ensure the effectiveness of security solutions.
• Develop and manage the security department budget, ensuring cost-effective solutions that meet security objectives.
• Ensure compliance with relevant laws and regulations, including privacy and data protection requirements.

This should describe you:

• Proven experience (at least 5 years) in a leadership role in the security space, with a track record of successfully implementing security programs, strategies and solutions in a complex business environment.
• In-depth knowledge of network security architecture and protocols, including firewalls, VPNs, IDS/IPS, and encryption protocols and/or cloud infrastructure security.
• Expertise in conducting security assessments, penetration testing, and vulnerability management, with a strong understanding of risk assessment methodologies.
• Proven experience in managing incident response, including handling security incidents, performing forensic analysis, and implementing remediation strategies.
• Thorough understanding of regulatory compliance requirements such as GDPR, NIST, and ISO 27001, with a demonstrated track record of ensuring compliance in previous roles.
• Experience in cloud security, including knowledge of cloud platforms such as AWS, Azure, or Google Cloud, and a solid understanding of cloud security best practices.
• Excellent leadership and communication skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders.
• A proactive and strategic mindset, with a demonstrated ability to