Director, InfoSec and Data Protection

ABOUT US:

Built around our mission, we started AG more than a decade ago as a way to bring comprehensive and convenient daily nutrition to just about everybody. Originators of the Essentialist Nutrition movement, our philosophy is to focus on a very small number of products based on what the latest science indicates is essential to human health.

AG1 is made from the highest quality ingredients, in accordance with the strictest standards and obsessively improved based on the latest science. 75 vitamins, minerals, and whole-food sourced nutrients in one convenient daily serving. Optimized for athletes, life-letes, and everyone in between. Vegan, Paleo, and Keto-friendly. One scoop or travel packet, 8 ounces of water. Every day. That's it.

Our mission is to empower people to take ownership of their health.

THE ROLE:

We are seeking to positively transform our business through utilization of innovative technology solutions, delivered at speed, releasing tangible business value. We are looking for a Director, InfoSec and Data Protection who will be responsible for the confidentiality, integrity, and security of our AG internal technology services and data. Reporting to the VP of Technology, the Director, InfoSec and Data Protection will be responsible for refining, implementing, and managing robust security strategies, policies, and procedures aligned with industry best practices and regulatory requirements. This role acts as a key partner to all departments and will collaborate closely with cross-functional teams to identify potential security risks, assess data practices, mitigate vulnerabilities, and respond effectively to security incidents. You will be at the center of a fast-paced, high-growth environment and will be relied on to make quick, accurate decisions. You will maintain process discipline and best practices, while adhering to our internal company values and standards.

The ideal candidate has proven, professional experience in digital technologies and a detailed knowledge of best practices in cyber security, risk management, infosec policies, privacy regulations, and data practices.

WHAT YOU’LL DO:

• Strategic Leadership
  • Lead the implementation of a comprehensive IT security and data protection strategy aligned with AG's business goals and industry standards
  • Build, mentor, and lead a team of security professionals, fostering a collaborative and innovative environment
  • Guide the technology team in the design and implementation of secure infrastructure and applications leveraging the latest security and data protection technologies
  • Create, update, and enforce IT security policies, standards, and procedures to safeguard sensitive information and systems
  • Stay current with emerging security technologies, trends, and best practices
  • Recommend and implement improvements to AG's security posture
• Assessment and Mitigation
  • Identify, assess, and prioritize security risks, vulnerabilities, and threats
  • Develop and execute risk mitigation plans to protect AG's digital assets
  • Drive a culture of security and data protection awareness by including training, resources, and ongoing education to employees at all levels
  • Lead effective actions to support security incident response, breaches, and data leaks
  • Evaluate and manage security and data protection risks associated with 3rd party vendors and partners
• Monitoring and Analysis
  • Implement advanced security monitoring tools and techniques to proactively identify and respond to potential threats
  • Manage data protection operations to include processing of data subject requests
  • Develop and maintain metrics, reports, and dashboards for executive leadership, conveying the state of AG's security posture
  • Orchestrate internal and external security audits to ensure compliance with industry regulations and frameworks

WHAT WE’RE LOOKING FOR:

• 10+ years in information security roles, with 3 years in a leadership or management capacity
• Bachelor's degree in InfoSec, Computer Science, or related field (Master's degree preferred)
• Industry certifications such as CISSP, CISM, CISA, or similar with proven continued education
• Understanding of security frameworks (CIS 8) and compliance regulations (GDPR, CCPA)
• Knowledge across multiple security domains: endpoint, cloud, and application security
• Experience managing SIEM, IDS/IPS, vulnerability platforms, and encryption technologies
• The ability to thrive in a fast-paced environment with a consistent “can-do” attitude
• Attention to detail and experience managing multiple work streams at once
• Strong interpersonal, written communication, and organizational sk