Director, Data Compliance and Cyber Security

Job Title: Director, Data Compliance and Cyber Security

Department: Engineering

Reports to: CEO

Who we are: At Persimmons, Inc., we are pioneering the future of generative AI with our ground-breaking full-stack innovations, including hardware and software integration capable of supporting trillion-parameter models. We envision the future of AI hardware with our cutting-edge generative AI solutions designed for edge computing and hyperscale cloud environments.  Our mission is to empower organizations to deploy AI capabilities at unprecedented scales and performance levels, bridging the gap between groundbreaking technology and real-world applications. We partner with some of the world's leading edge and hyperscale cloud companies to deliver high-performance, secure, and compliant AI hardware solutions.

Job Summary:

We are seeking an experienced Data Compliance and Cyber Security leader to join our dynamic team. In this critical role, you will be responsible for developing, implementing, and managing comprehensive data compliance and cyber security strategies. You will ensure that our products, services, and internal systems adhere to all relevant regulations and industry best practices, safeguarding both company and customer data. Your expertise will help us maintain the trust of our edge computing and hyperscale cloud customers by ensuring the highest standards of security and compliance.

Key Responsibilities:

1. Regulatory Compliance:

   • Lead the development and implementation of data protection policies and procedures in compliance with global regulations such as GDPR, CCPA, HIPAA, and other relevant laws.

   • Monitor and interpret changes in data protection legislation, updating company policies accordingly.

   • Conduct regular compliance audits and assessments, preparing and submitting necessary reports to regulatory bodies.

   • Collaborate with legal counsel to address and resolve compliance issues.

1. Cyber Security Strategy and Architecture:

   • Design and implement a robust cyber security strategy aligned with industry standards (e.g., ISO 27001, NIST CSF).

   • Establish and maintain security architectures for internal systems and product offerings, incorporating secure hardware design principles.

   • Integrate security best practices into the software development lifecycle (SDLC) and hardware production processes.

1. Edge Computing Security:

   • Develop and implement security measures tailored for edge computing devices, addressing challenges like physical tampering, secure boot, and firmware integrity.

   • Ensure edge devices comply with security standards and support secure remote management and updates.

1. Cloud Security Compliance:

   • Collaborate with hyperscale cloud customers to understand and fulfill their stringent security and compliance requirements.

   • Ensure seamless integration of our products with cloud security protocols, supporting compliance standards such as SOC 2, FedRAMP, and ISO 27017/27018.

1. Risk Management:

   • Conduct regular risk assessments and security audits on systems, networks, and products.

   • Identify vulnerabilities and threats, developing and implementing mitigation strategies.

   • Implement security controls to protect against cyber threats and data breaches.

1. Incident Response and Management:

   • Develop and maintain incident response plans and procedures.

   • Lead investigations into security incidents, coordinating with internal teams and external agencies as necessary.

   • Provide post-incident analysis and implement improvements based on lessons learned.

1. Customer and Vendor Engagement:

   • Serve as the primary point of contact for all data compliance and cyber security matters with customers and vendors.

   • Manage security aspects of customer contracts, service agreements, and vendor relationships.

   • Evaluate and monitor third-party vendors and service providers for compliance with security policies and standards.

1. Training and Awareness:

   • Develop and deliver comprehensive security and compliance training programs for employees.

   • Foster a culture of security awareness and adherence to best practices th