Director of Security at Arrive Logistics | Austin, TX, US | Rezi

Director of Security at Arrive Logistics

Director of Security

Arrive Logistics · Austin, TX, US

Yesterday

Director of Security

Arrive Logistics · Austin, TX, US

2 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Director of Security role.

Rezi rewrites your resume against Arrive Logistics's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Director of Security posting at Arrive Logistics — free, in seconds.

About the Role

Arrive Logistics is seeking an expert, builder-minded Director to lead security strategy, operations, and audit readiness, reporting directly to the VP of Enterprise IT. This role involves managing security day-to-day, overseeing security tools and partners, and preparing the company for increased scrutiny as it grows. The ideal candidate will assess the current program, identify gaps, and drive continuous improvement in security posture and team performance.

Responsibilities

  • Own detection, monitoring, and incident response end-to-end, including MDR relationship, SIEM use, and escalation paths.
  • Set measurable standards for response times and incident quality, and conduct post-incident reviews to improve operations.
  • Manage vulnerability management and asset discovery as a program with clear ownership, deadlines, and tracking.
  • Partner with Engineering leadership to define and audit security standards, integrating security into the software development lifecycle.
  • Set security standards for the Azure-primary cloud environment and monitor posture against them.
  • Determine when to prioritize speed versus security, and escalate non-compliance with remediation agreements.
  • Own security testing strategy, including scope of external penetration tests and integration of automated testing results.
  • Define audit readiness requirements beyond SOC 2 Type II and build the roadmap to achieve them.
  • Own AI security policy and contribute to the governance of AI tools, including data access, usage visibility, and risk.
  • Set identity security requirements and review outcomes with Infrastructure, ensuring adherence to access standards and review cadences.
  • Manage third-party security risk, from intake and assessment to ongoing review, and handle customer security questionnaires.
  • Review and refine the process for generating, owning, and prioritizing security work, replacing ad hoc methods with a disciplined process.
  • Report security posture, risk, and progress to executive leadership in business terms.

Requirements

  • 12+ years in information security, with 5+ years leading security teams and owning a security program at director level or above.
  • Proven record leading security through a growth cycle and SOX-relevant IT controls, with experience working with external auditors.
  • Deep GRC experience: SOC 2, risk management, control design and testing, evidence management, and running audits from the security side.
  • Hands-on command of detection and response, including working with an MDR provider and SIEM, and managing incidents under pressure.
  • Strong cloud security background, with Azure as the primary environment, plus endpoint, network, and identity security.
  • Application security and DevSecOps experience, with a record of setting standards adopted by Engineering teams.
  • Demonstrated ability to assess a team, identify skill and process gaps, and rebuild or upgrade the team to close them.
  • Executive presence: ability to brief executive leadership, the CFO, and auditors, explain risk in business terms, and push back on senior leaders with evidence.
  • Security certifications such as CISSP, CISM, CISA, CRISC or CCISO, or equivalent experience.
  • Experience in logistics, transportation, brokerage, or another high-volume, partner-connected business.
  • Experience with AI governance and policy for enterprise AI tools.
  • Bachelor's degree in computer science, cybersecurity, information technology, or equivalent professional experience.

Skills

  • Information Security
  • Security Strategy
  • Security Operations
  • Audit Readiness
  • Managed Detection and Response (MDR)
  • SIEM
  • Vulnerability Management
  • Asset Discovery
  • Cloud Security (Azure)
  • Endpoint Security
  • Network Security
  • Identity Security
  • Application Security
  • DevSecOps
  • GRC
  • Risk Management
  • Control Design and Testing
  • Evidence Management
  • Incident Response
  • Penetration Testing
  • AI Security Policy
  • AI Governance
  • Third-Party Risk Management
  • Executive Communication

Location

  • Austin, TX

Work Type

  • Onsite
  • Full-time

Experience Level

  • Senior-level
  • Director

Education Level

  • Bachelor's degree in computer science, cybersecurity, information technology, or equivalent professional experience.

Benefits

  • Medical coverage
  • Dental coverage
  • Vision coverage
  • Life insurance
  • Disability insurance
  • Supplemental coverage
  • Matching 401(k) program
  • Employee Resource Groups
  • Office wide engagement activities
  • Team events
  • Happy hours
  • Company paid holidays
  • Paid vacation time
  • Wellness days
  • 100% paid parental leave
  • Referral Program
  • Relocation assistance

About the Company

  • Arrive Logistics is a leading transportation and technology company in North America with plans for significant year-over-year growth.
  • The company has an award-winning culture that supports personal and career development in a fun, casual, and collaborative environment.
  • Arrive Logistics has been recognized as a top workplace by Inc. Fast Company, Fortune, and earned Top Workplaces and Great Place to Work.
  • Employee-founded resource groups create communities within Arrive, including Women in Logistics, Emerging Professionals, Prisms, Black Logistics Group, Salute and Unidos.

Equal Opportunity

  • Arrive Logistics adheres to strict recruitment practices. Candidates undergo an interview process, and Arrive Logistics does not provide unsolicited job offers. If you have concerns about receiving a fraudulent offer, please contact talentacquisition@arrivelogistics.com for verification.