Director of Information Security

Constructor
Zagreb
Workplace: RemoteFull timeFunction: CybersecurityExperience: 5+ yearsSkills: ["Customer-facing communication","Independent execution","Risk assessment","Incident management","Security policy writing"]

Own Constructor’s security program end-to-end, partnering with Platform Engineering to strengthen cloud, container, and application security. Lead SOC 2 Type II and ISO 27001 compliance, manage incident response, and run ongoing risk assessments and access governance. Serve as the senior security leader for customer prospect engagements, support internal tool/vendor evaluations, and establish AI and data-loss prevention guardrails in a fully remote, lean engineering organization.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Constructor
Constructor
1 week ago

Director of Information Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Own Constructor’s security program end-to-end, partnering with Platform Engineering to strengthen cloud, container, and application security. Lead SOC 2 Type II and ISO 27001 compliance, manage incident response, and run ongoing risk assessments and access governance. Serve as the senior security leader for customer prospect engagements, support internal tool/vendor evaluations, and establish AI and data-loss prevention guardrails in a fully remote, lean engineering organization.
Location: Zagreb
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Director level

Key Responsibilities

  • •Own the security program end-to-end, protecting the platform, customers’ data, and the team.
  • •Lead SOC 2 Type II and ISO 27001 certification programs, manage external auditors, maintain controls, and ensure continuous compliance.
  • •Own incident response from detection through resolution and post-mortem, and continuously improve the incident response plan.
  • •Run risk management through ongoing risk assessments, maintaining the risk register, and presenting risk posture to leadership and the board.
  • •Answer prospect security questions and finalize security questionnaires while representing Constructor’s security posture in customer-facing engagements.

Pay and Benefits

Perks:Paid LeaveEquityRemote WorkHome OfficeLearning BudgetParental Leave

Key Requirements

  • •5+ years of information security experience, including at least 2 years in a senior or leadership role.
  • •Proficiency with AI tools like Claude Code.
  • •Deep familiarity with compliance frameworks including SOC 2, ISO 27001, GDPR, and CCPA.
  • •Experience owning incident response end-to-end in a SaaS or cloud-native environment.
  • •Hands-on experience with identity management (Okta or similar), MDM, DLP, and cloud security tooling.
Experience:5+ yearsSaaSCloud-nativeInformation security
Skills:Customer-facing communicationIndependent executionRisk assessmentIncident managementSecurity policy writing
Certifications:CISSPCISM
Languages:English
Tech Stack:Claude CodeSOC 2ISO 27001GDPRCCPAAWSOktaMDMDLPIdentity managementContainer securityVulnerability managementRed/purple teamIncident response plan

Company Brief

Constructor
Provides an AI-powered site search and product discovery platform for e-commerce and retailers, improving search relevance, recommendations, personalization, and merchandising to boost conversions and average order value.
Industry: Enterprise Software
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: San Francisco, United States
WebsiteLinkedIn