Director, Information Security

Loop is industrializing services through AI, starting with one of the world's most complex industries: the global supply chain. We're an AI-native company built to solve the systemic data problem that's held logistics back for decades. Our Logistics Data Platform turns fragmented, unstructured data into a trusted foundation that fuels automation, financial clarity, and decision intelligence at scale. Today, Loop serves >20% of the Fortune 100, manages over $30B in supply chain spend, and helps its clients save hundreds of millions of dollars each year.

We recently closed a $95M Series C and are backed by leading investors including Valor Equity Partners, Founders Fund, 8VC, Index Ventures, J.P. Morgan, and more than 50 industry-leading angel investors.

Our team brings deep expertise from Uber, Google, Microsoft, Meta, Amazon, Flexport, C3 AI, VMware, Box, UPS, and C.H. Robinson and we're looking for builders who want to help shape what comes next.

About the Role

The Director of Information Security will report to Loop’s CISO and serve as a senior technical and operational leader within the security organization.

You will be responsible for translating Loop’s security strategy into a high-performing security program across security architecture, security operations, incident response, vulnerability management, cloud and application security, identity and access, data protection, and technical security controls.

This is a builder role. You will work closely with Engineering, Product, IT, Legal, and business teams to identify risks, design practical controls, and ensure those controls work in practice — not just on paper.

Loop operates at the intersection of enterprise software, AI, data, and payments. The right person brings the technical depth and rigor expected in financial infrastructure while operating with the speed, judgment, and pragmatism required in a high-growth software company.

This is an in-person role based in San Francisco, Chicago, or New YorkCity with the exception of being in the office 4+ days per week.

What You'll Do

Build and operate Loop’s information security program

• Partner with the CISO to translate Loop’s security strategy into a clear technical roadmap and operating plan.
• Own execution across core information security domains, including security operations, vulnerability management, incident response, identity and access, data protection, security architecture, and third party vendor risk management.
• Bridge technical controls needed to meet compliance and audit requirements.
• Partner with the CTO to ensure Product Security and DevSecOps integration.
• Establish measurable security objectives, operating metrics, and mechanisms for identifying and remediating risk.
• Continuously improve Loop’s security posture as the company, product, and threat environment evolve.

Lead security architecture and engineering

• Partner deeply with Engineering and Infrastructure to embed security into Loop’s architecture and software development lifecycle.
• Design and implement controls across cloud infrastructure, applications, APIs, endpoints, identity, data, and third-party integrations.
• Conduct and oversee threat modeling, architecture reviews, penetration testing, and technical risk assessments.
• Help teams make thoughtful security tradeoffs without unnecessarily slowing product development.
• Develop security architecture appropriate for increasingly autonomous AI systems, agents, and workflows.

Own security operations and incident response

• Build and operate capabilities for monitoring, detection, investigation, containment, and remediation.
• Own vulnerability management from discovery through prioritized remediation.
• Develop and continuously improve Loop’s incident-response processes, tooling, playbooks, and exercises.
• Lead technical response during security incidents and coordinate effectively across Engineering, IT, Legal, Communications, and executive leadership.
• Drive rigorous post-incident reviews and ensure lessons translate into durable improvements.

Protect Loop’s data and identity

• Partner with IT and Engineering to strengthen identity and access controls, including SSO, MFA, privileged access, RBAC, secrets management, and access lifecycle management.
• Establish technical controls protecting sensitive customer, financial, employee, and company data.
• Advance Loop’s capabilities around data classification, encryption, retention, loss prevention, and monitoring.
• Develop practical security guardrails for the adoption of generative AI, third-party models, agents, and other emerging technologies.

Partner on risk, compliance, and customer security

• Work with the CISO, Legal, and other stakeholders to translate frameworks such as SOC 2, NIST CSF, ISO 27001, NIST AI RMF, ISO 42001, GDPR and other data privacy requirements into effective technical controls.
• Provide technical leadership for security assessments, audits, penetration tests, and remediation programs.
• Support enterprise customer security reviews and engage directly with sophisticated customer security teams when technical depth is required.
• Assess security risks associated with vendors, partners, acquisitions, and new technologies.
• Ensure compliance requirements result in durable security improvements rather than check-the-box processes.

Build an organizational culture of security first mindset

• Help define the structure, capabilities, tooling, and talent Loop needs as the security organization scales.
• Recruit, develop, and lead exceptional security professionals.
• Build strong working relationships across Engineering, Product, IT, Legal, Finance, and Operations.
• Create leverage through automation, strong tooling, and clear ownership rather than relying on manual processes.
• Develop a culture where security is viewed as a shared engineering and business responsibility.

About You

• 10+ years of experience in information security, cybersecurity, security engineering, or related disciplines, with meaningful leadership experience.
• Deep technical expertise across several security domains, such as cloud security, application security, security operations, identity, infrastructure security, incident response, or vulnerability management.
• Experience operating security programs in a modern cloud-native technology environment.
• Experience in fintech, payments, enterprise SaaS, AI/data infrastructure, or another environment handling sensitive or regulated data.
• Strong understanding of AWS or comparable cloud environments, modern SaaS architectures, APIs, identity systems, and software development practices.
• Experience building and operating detection, vulnerability management, incident-response, and security-engineering capabilities.
• Working knowledge of security and control frameworks such as SOC 2, NIST CSF, ISO 27001, NIST AI RMF, ISO 42001, GDPR, and related standards.
• Comfortable personally diving into technical details while also leading teams and cross-functional programs.
• Able to communicate technical security risks clearly to engineers, executives, customers, and non-technical stakeholders.
• Strong judgment around risk. You know which issues require immediate action, which can be mitigated over time, and where additional process creates little incremental security.
• Builder mentality. You prefer designing better systems and automating controls to administering manual processes.
• High intellectual curiosity, particularly around the rapidly evolving security implications of AI and autonomous systems.

What Success Looks Like

• Translated Loop’s security strategy into a clear, measurable technical security roadmap.
• Improved Loop’s ability to identify, prioritize, and remediate vulnerabilities and security risks.
• Strengthened detection, incident-response, identity, data protection, and cloud/application security capabilities.
• Built strong, trusted partnerships with Engineering and Product and embedded security more deeply into how Loop builds software.
• Established clear metrics and operating rhythms for understanding the effectiveness of Loop’s security controls.
• Improved the scalability and automation of Loop’s security program.
• Developed a clear security architecture for Loop’s expanding use of AI, data, and automated workflows.
• Helped build the security team and technical foundation capable of supporting Loop’s next phase of growth.

Compensation and Benefits

The base pay range for this role is $210,000 to $235,000 annually. This range reflects the base pay that Loop reasonably expects to pay for the position at the time of hire. Actual compensation will depend on job-related factors, including experience, skills, qualifications, location, and business needs.

In addition to base salary, this role may be eligible for an annual performance bonus and equity. This role is also eligible for Loop's benefits, including health, dental, and vision insurance, 401(k) match, paid time off, paid holidays, and parental leave.

• This role is also eligible for Loop's benefits, including health, dental, and vision insurance, 401(k) match, paid time off, paid holidays, and parental leave.

Equal Opportunity

Loop is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by law.

Why You Should Join Loop

Loop operates at an unusually interesting intersection of AI, enterprise software, financial infrastructure, and supply-chain data. That creates security problems that are both technically challenging and consequential.

You will work directly with Loop’s CISO and engineering leadership to build a modern security program from the inside out — one that protects billions of dollars of financial activity and sensitive enterprise data without sacrificing the speed that has made Loop successful.

This is an opportunity to have significant ownership, build durable systems, and shape what excellent information security looks like at a rapidly scaling technology company.