Director, Enterprise Security & IT

At Klue, We’re Building the Future of Competitive Intelligence

We’re looking for a Security, Compliance & IT Leader 👋

As our Director, Enterprise Security & IT, you'll sit at the intersection of security, compliance, and IT operations. You'll be accountable for how Klue protects customer data and how every Kluebee gets equipped to do their best work. Today, these three areas sit under different teams. You'll turn them into one team with one roadmap, working alongside an Engineering org that already builds and runs our product infrastructure.

Your Mission? To own the security and compliance posture that our customers, our sales team, and our own people rely on. That covers everything we do: from building the product, to the internal automations, to the tools we use, and how we use AI. You'll set the standard, build the systems and set the rhythm to meet it. And in the process, make the secure way, the easy way.

What's In It for You?

**You won't inherit a playbook. You'll write it. You'll define the operating model, the culture, and the technical direction for a brand-new function, and shape a small, sharp team of 2 from day one. You'll report directly to the CTO and work closely with the Senior Leadership Team, as well as the Engineering, Product, Sales, and People teams. You'll tackle big questions like how to govern AI agents connected to company systems, and your answers will set policy at Klue. As Klue grows, so do the team and your scope. You have the power to shape what that looks like.

What You'll Do

• Own security posture and incident readiness. Mature how Klue prevents, detects, and responds to security issues. Design the incident response process and governance, and make sure everyone knows their role before something goes wrong.

• Run the compliance engine. Own the annual audit cycle against SOC 2 Type II, NIST CSF, and BSIMM, plus penetration testing, from evidence collection to a successful finish. Build audit methodology and documentation that make reviews faster and less painful for the whole company.

• Be the security answer for go-to-market. Keep customer questionnaires, external assessments, and audits moving on time. Review and negotiate data protection agreements and security exhibits with customers and vendors so what we sign matches what we do.

• Govern vendors, data, and privacy. Run full-spectrum vendor reviews, including sub-processor qualification. Own DLP, data retention, and the privacy framework for an international customer base, including data subject access requests.

• Set the rules for AI and high-risk access. Own AI security governance: policies, risk acceptance, data handling, and permissioning for AI tools, agents, and integrations connected to company systems. Define and enforce access governance for high-risk systems, including admin access reviews, service accounts vs. individual credentials, and controls on sensitive logs and data.