VP, Product and Engineering Security (Seattle, WA)

About GeoComply
We’re GeoComply! We are at the forefront of geolocation, cybersecurity, and anti-fraud innovation, developing and delivering cutting-edge technologies to help ensure regulatory compliance, combat bad online actors, alleviate user friction, and protect businesses from fraud.
Achieving significant business and revenue growth over the past three years and dubbed a tech “Unicorn,” GeoComply has been trusted by leading global brands and regulators for over ten years. Our compliance-grade geolocation technology solutions are installed on over 400 million devices and analyze over 12 billion transactions a year.
At the heart of it all is the people, united by a deep commitment to problem-solving and revolutionizing how people and businesses use the internet to instill confidence in every online interaction. With teams across five countries, three continents, and a global customer base, we have no plans to slow down.
The Role
As the VP, Product and Engineering Security at GeoComply, you will be a pivotal leader responsible for shaping and executing a comprehensive security strategy that deeply integrates with our product development lifecycle and corporate infrastructure. This role demands a strong technical foundation in application and product security and extensive experience in managing corporate IT and security risks, including incident management, to safeguard our innovative technologies, intellectual property, and customer data while meeting regulatory requirements. You will collaborate closely with engineering, product, and executive teams, as well as external stakeholders, to navigate the evolving digital security landscape.
This role offers the opportunity to lead a best-in-class security organization that supports GeoComply’s growth while positioning us as a leader in security and compliance across the industries we serve.

Key Leadership Responsibilities

• Define and champion a global security vision that prioritizes secure development practices, application security, and enterprise-wide IT infrastructure protection, aligning these initiatives with GeoComply’s business objectives and growth strategy.
• Own the comprehensive security roadmap, specifically focusing on integrating security into the SDLC and ensuring the resilience of our products and platforms against evolving threats.
• Partner closely with engineering and product leadership to embed security by design principles and influence key technical decisions, ensuring cybersecurity is a fundamental aspect of our innovation and future planning, including our IPO preparations.
• Build internal security capabilities with an eye toward future productization.
• Oversee and, when necessary, directly project manage critical security initiatives and the implementation of security technologies and processes.
• Lead the development and implementation of security strategies for emerging technologies, including Artificial Intelligence, establishing guardrails, ensuring data protection, and upholding privacy principles within AI systems.
• Digital Transformation: Driving initiatives to modernize processes and enhance efficiency through technology, often collaborating with other departments.

Risk & Compliance Oversight

• Develop and oversee a proactive threat detection and intelligence program to identify and mitigate potential attacks against GeoComply’s products and infrastructure.
• Champion regulatory compliance efforts by leading key initiatives such as ISO 27001, SOC 2, and GDPR, ensuring full readiness for audits and certifications, focusing on how these apply to our product offerings.
• Lead GeoComply’s global risk management program, ensuring proactive identification, assessment, and mitigation of security risks across all facets of the business, including those inherent in our technology and development processes.
• Incident Management: Lead all aspects of the company’s incident management program and processes, including incident response and breach notification, regulatory communications, and resolution. Partner with internal stakeholders to drive root cause assessment and corrective action.
• Establish and maintain comprehensive data security and privacy programs, working with relevant teams to implement best practices, provide recommendations, and ensure compliance with global data protection regulations.
• IT: Lead all aspects of the company’s IT team, including controls, procurement, and operationalizing all of GeoComply’s core systems to ensure technology empowers the business, minimizes risk, and drives future growth.

Executive Engagement & External Relations

• Serve as the primary representative for GeoCom