Director of Information Security

About the Company

We are a renewable energy and ocean technology company committed to rapidly developing and deploying technologies that will ensure a sustainable future for Earth by unlocking the vast energy potential of its oceans. Our focus is on capturing civilizational levels of ultra-low-cost renewable energy for applications including computing and affordable renewable fuels delivered to shore.

The company is a public benefit corporation headquartered in Portland, Oregon, and backed by leading venture capitalists, philanthropic investors, university endowments, and private investment offices. We operate as an idea meritocracy in which the best ideas change the company’s direction on a regular basis.

About the Job

Panthalassa is moving from prototype systems toward repeatable production, larger facilities, more connected enterprise systems, and increasingly mission-critical software, infrastructure, and operational data flows. We’re hiring a Director of Information Security to design and build the security foundations that will allow the company to scale quickly without losing control.

This is a hands-on, high-leverage builder role. You will own the technical direction of Panthalassa’s information security program across corporate infrastructure, cloud environments, engineering systems, identity and access management, enterprise applications, and security operations. Your job is not to create bureaucracy. Your job is to build practical guardrails, resilient architectures, and clear operating mechanisms that make the company more secure while helping engineering, manufacturing, and business teams move faster.

You’ll partner closely with IT, software, test, enterprise systems, manufacturing, and leadership to identify the highest-risk gaps, prioritize what matters, and implement controls that are robust, scalable, and usable in the real world. This role is both an individual contributor and a strategic leadership role, where you will shape the broader security organization, vendor strategy, and long-term roadmap.

Responsibilities

• Own the technical roadmap for information security across Panthalassa’s corporate, cloud, and enterprise systems environments
• Design and implement security architecture for identity, endpoint, network, SaaS, and cloud systems, with a focus on secure-by-default standards
• Build practical security guardrails into engineering and operational workflows, including source control, CI/CD, infrastructure as code, secrets management, logging, and access reviews
• Partner with IT and infrastructure teams to harden corporate networks, cloud environments, endpoints, and collaboration systems
• Define and implement identity and access management patterns, including SSO, MFA, role-based access controls, privileged access workflows, and lifecycle management
• Lead vulnerability management across internal systems and applications, including scanner tuning, prioritization, remediation guidance, and verification of fixes
• Establish detection and response capabilities appropriate for the company’s scale, including telemetry strategy, alerting, incident playbooks, and forensic readiness
• Secure enterprise systems and the digital thread that support engineering release, manufacturing, supply chain, and operations
• Perform security architecture reviews for new tools, vendors, infrastructure changes, and internal systems
• Build lightweight, durable security policies and standards that are aligned with how the company actually works
• Partner with legal, finance, IT, and business operations on audit readiness, third-party risk, and customer or partner security requirements
• Drive remediation of high-priority risks through direct implementation, automation, and close partnership with system owners
• Create clear documentation, runbooks, and training that raise the security baseline across the company
• Serve as a senior technical advisor during security incidents and significant operational events

Required Qualifications

• 8+ years of experience in security engineering, infrastructure security, platform security, or a closely related domain
• Strong hands-on experience securing cloud and enterprise environments, including identity, networking, endpoints, SaaS, and logging/monitoring systems
• Experience building and operating security controls in modern engineering environments, including CI/CD pipelines, source control platforms, infrastructure as code, and developer tooling
• Deep knowledge of identity and access management, including SSO, MFA, RBAC, provisioning/deprovisioning, and privileged access design
• Proven experience leading vulnerability management and remediation programs in a fast-moving engineering environm