Tech Lead, Security

About Foursquare: 

Foursquare is the leading independent location technology and data cloud platform dedicated to building meaningful bridges between digital spaces and physical places. Our proprietary technology unlocks the most accurate, trustworthy location data in the world, empowering businesses to answer key questions, uncover hidden insights, improve customer experiences, and achieve better business outcomes. A pioneer of the geo-location space, Foursquare’s location tech stack is being utilized by the world’s largest enterprises and most recognizable brands.

About the Position:

We are looking for a Tech Lead, Security located in or near one of our office hubs - San Francisco, New York City, or Seattle. You will be responsible for providing technical leadership managing data and information risks related to product development, technology solutions, crisis management, governance risk, compliance and data privacy.

The Tech Lead, Security will have responsibility for all data/information security policies, standards, evaluations, and determining, implementing, and supporting cyber security standards for the global enterprise. The ideal candidate will be creative and technologically bold as well as possess a mix of pragmatism, strong management, communications skills, and technical depth.

You will be involved in all facets of information security and work across departments in a fast-paced environment, wearing multiple hats and managing large initiatives such as security audits. You must have a passion for implementing and supporting cyber security standards to keep our customers and our company's data safe. You will also drive the adoption of SOC2 / ISO certification(s) as we evolve from a data provider to a cloud software strategy.

In this role, you'll:

• Drive the technical strategy for the Security organization in order to identify, develop, implement, and maintain security processes, practices, and policies throughout the organization to reduce risks, respond to incidents, and limit exposure and liability in all areas of informational, financial, physical, personal, and reputational risk.
• Ensure Foursquare is in compliance with local, national, and international regulatory environments where applicable to the accountability of this role (e.g. privacy and data protection)
• Partner with legal and compliance teams to create and support a security culture through education and awareness programs designed to reduce the risks to the enterprise while also engaging key business leaders to ensure business unit involvement.
• Ability to assess infrastructure and AI software vendors for their compliance with information and security standards.
• Develop an effective strategy to assess and mitigate risk (foreign and domestic), managing crises and incidents, maintaining continuity of operations, and safeguarding the organization
• Your team will research and deploy state-of-the-art technology solutions and innovative security management techniques to safeguard the organization's personnel and assets, including intellectual property and trade secret
• Your team will establish and promote security by design best practices, and provide expertise and implementation of secure solutions in regards to feature development and controls on SDLC and cloud governance - often in collaboration with other engineering teams
• Enable Foursquare to stay ahead of the global threat landscape and the technologies used to defend corporate assets, reputation and revenue-streams

What you'll need:

• 10+ years of relevant experience in highly technical Security roles
• 5+ years in be senior leadership role
• Hands-on experience leading incident response activities for security events
• Experience with security on cloud platforms with a deep understanding of offerings from key cloud providers (i.e. AWS, Databricks, Snowflake)
• Expertise in a variety of multifactor authentication platforms and other relevant access management technologies
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and nontechnical audiences
• Broad practical experience in security software in Mobile Device Management (MDM), Privileged Access Management (PAM), EDR applications, MacOS, iOS, Microsoft platforms, and VM environments, etc.
• Knowledge of best practices of IT security hardware and software (Firewall, IDS, IPS, Content Filters, VPN, Authentication and Encryption)
• Proven track record and experience in developing information security policies and procedures, as well as successfully executing programs that meet the objectives of excellence in a dynamic bu