Head of Security

Overview & Scope PortX is a leading AI-powered data and integration company for modern banking, bringing systems together and data to life through our unified platform for modern integration, governed customer 360 data, and next-generation payments. We're in strong growth mode and are hiring our first dedicated Head of Security role in our HQ on Mercer Island, to own the company’s security posture end-to-end. You will build the function from a strong but informal foundation, establish repeatable processes, and position us for SOC 2 Type II and ISO 27001 certification as we quickly scale. This is a hands‑on leadership role — you will be both the strategist and, initially, the primary executor running a small but dedicated team. In addition to a competitive basic salary, benefits include an attractive equity package, insurance (medical, dental, vision), unlimited PTO, and 401(k). Duties & Responsibili Own and evolve the company’s security strategy, roadmap, and risk register; report quarterly to leadership and the board. Lead all compliance efforts — SOC 2 Type II (in‑flight), ISO 27001, applicable AI standards and customer security questionnaires. Manage and mature our cloud security posture across AWS and on-premises customer environments, including IaC security, secrets management, and network segmentation. Partner with Engineering to embed security into the SDLC: threat modelling, secure code review, SAST/DAST tooling, and pen‑test remediation. Own the incident response plan; be the on‑call escalation point for security events. Build and run a lightweight security awareness and training program for all staff. Manage relationships with MSSPs, pen‑test vendors, and external auditors. Support Sales and Customer Success on enterprise security reviews, RFPs, and contractual DPA/MSA negotiations. Hire and grow a small but mighty security team (1–2 hires in Year 1) as budget permits Experience & Qualifications Required 8+ years in information / product security roles, with at least 2 years in a leadership capacity at a SaaS or fintech company. Proven track record driving SOC 2 Type II or equivalent compliance at a company of comparable size (50–200 employees). Deep hands‑on expertise in cloud security (AWS), identity & access management, and application security as well as on‑premises connectivity e.g. VPNs etc. Experience supporting enterprise sales cycles with security documentation and customer‑facing audits. Strong communication skills — able to translate technical risk into business language for executives and board members. Nice to Have CISSP, CISM, or equivalent certification Background in financial services, banking technology, or regulated data environments. Familiarity with PCI‑DSS and banking industry financial regulations. Experience building a security function from scratch at a high‑growth startup. #J-18808-Ljbffr PortX