Head of Security

Join the Sleep Fitness Movement

At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience. We are trusted by high performers, professional athletes, and health-conscious consumers in over 30 countries worldwide. Recognized as one of Fast Company's Most Innovative Companies in 2019, 2022, and 2023, and twice named to TIME's “Best Inventions of the Year.” We operate like a high-performance team: fast, focused, and motivated by impact. We don’t just ship; we iterate, refine, and obsess over the details that help our members sleep better and wake up stronger.

Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world-class talent, and help shape a future where sleep isn’t passive - it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.

High Standards. No Apologies.

We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. Think Kobe Bryant’s mamba mentality, applied to bold ideas, next-gen tech, and flawless execution. This isn’t a 9-to-5. We’re a team that puts in the extra effort, not because it’s required, but because we care about the impact of our work. We’re here to build fast, push limits, and deliver without compromise. If you thrive under pressure and want to do the most meaningful work of your career, you’ll feel right at home. If you’re looking for something easier –this isn’t it.

The Role

The Head of Security and Compliance will be responsible for building and leading Eight Sleep’s security strategy across physical, digital, and operational domains. This leader will ensure the confidentiality, integrity, and availability of our data, systems, and devices, while also protecting our employees and customers. This is a highly cross-functional role requiring collaboration with engineering, product, legal, operations, and executive leadership.

How you’ll contribute

• Strategy & Leadership

  • Define and own Eight Sleep’s end-to-end security strategy across cloud, product, corporate, and customer environments.

  • Serve as the primary security advisor to the executive team—translating risk into clear business decisions and helping set the company’s security posture and risk tolerance.

  • Build and scale Eight Sleep’s security program, including roadmap, processes, metrics, and future team structure.

• Information & Cybersecurity

  • Oversee security architecture and practices for software, cloud infrastructure, connected devices (IoT), and data storage.

  • Ensure compliance with security frameworks (e.g., SOC 2, GDPR, HIPAA).

  • Lead vulnerability management, threat detection, and incident response.

  • Develop protocols for access management, disaster recovery, and crisis response.

• Product & Customer Trust

  • Partner with engineering and product teams to embed security-by-design into all Eight Sleep products.

  • Guide threat modeling for cloud services, mobile apps, and hardware/firmware components.

  • Implement privacy and security controls that protect customer data and build trust.

  • Conduct penetration tests, risk assessments, and security audits.

• Governance, Risk & Compliance (SOC2, GRC)

  • Lead Eight Sleep’s compliance programs (e.g., SOC 2, GDPR) and partner with legal on privacy obligations.

  • Establish policies, training programs, and awareness initiatives across the organization.

  • Lead third-party risk management and vendor security reviews.

  • Stay ahead of evolving global regulations around data privacy and security.

What you need to succeed

• 8-10+ years of experience in security engineering, with deep expertise in mobile app security, IoT device security, or cloud infrastructure security

• Proven expertise in cybersecurity, cloud infrastructure security (AWS), IoT device security, and corporate