The posting
Who We Are
Arrive Logistics is a leading transportation and technology company in North America with plans to grow significantly year over year. Our success is a testament to our remarkable team and what we’re building together. We’re committed to providing employees with a meaningful work experience and have established an award-winning culture that supports personal and career development in a fun, casual, and collaborative environment.
Who We Want
Arrive is hiring its senior-most security leader: an expert, builder-minded Director who owns security strategy, operations and audit readiness, and reports directly to the VP of Enterprise IT. You will run security day to day, with full visibility into our managed detection and response (MDR) partner and every security tool, and you will be the face of security. You will work to help Arrive build a stronger audit function and prepare for the scrutiny of a larger, more regulated company. We are not looking for a steady-state operator. Where we are today is the minimum. You will assess the team and the program honestly, find the gaps in skills, process and tooling, and drive continuous improvement in both the security posture and the people who deliver it.
You are an expert, and we expect you to act like one. You will lead, set the standard, and challenge the people you work with when you believe the call is wrong. You will know when to open the gate for the business and when to close it, and you will stand your ground when a partner does not follow through.
What You'll Do
- Own detection, monitoring and incident response end to end, including the MDR relationship, SIEM use and escalation paths into our service management workflow.
- Set measurable standards for response times and incident quality, and run post-incident reviews that change how we operate.
- Run vulnerability management and asset discovery as a managed program with clear owners, deadlines and tracking.
- Partner with Engineering leadership to define security standards, then audit against them. Build the working relationship so security is part of how software ships, not a late-stage gate.
- Set security standards for our Azure-primary cloud environment and monitor posture against them.
- Decide when to open the gate for speed and when to close it. When a partner does not follow through on agreed remediation, escalate and insist on execution.
- Own security testing strategy, including the scope of external penetration tests and how automated testing results reach the security team.
- Define what audit readiness requires beyond today's SOC 2 Type II, and build the roadmap to get there.
- Own AI security policy and be a key contributor to how AI tools are governed, including data access, usage visibility and risk.
- Set identity security requirements and review outcomes with Infrastructure, who own the identity platform. Hold the line on access standards, privileged access and review cadence.
- Run third-party security risk management, from intake and assessment to ongoing review, and own the answers to customer security questionnaires through your team.
- Review the fundamentals of how security work is generated, owned and prioritized, and replace ad hoc work selection with a disciplined process.
- Report security posture, risk and progress to the executive leadership team in plain business terms.
Qualifications
- 12+ years in information security, with 5+ years leading security teams and owning a security program at director level or above.
- Proven record leading security through a growth cycle and through SOX-relevant IT controls and working with external auditors.
- Deep GRC experience: SOC 2, risk management, control design and testing, evidence management, and running audits from the security side.
- Hands-on command of detection and response, including working with an MDR provider and SIEM, and running incidents under pressure.
- Strong cloud security background, with Azure as the primary environment, plus endpoint, network and identity security.
- Application security and DevSecOps experience, with a record of setting standards that Engineering teams adopt.
- Demonstrated ability to assess a team, identify skill and process gaps, and rebuild or upgrade the team to close them.
- Executive presence: able to brief the executive leadership team, the CFO and auditors, explain risk in business terms, and push back on senior leaders with evidence.
- Security certifications such as CISSP, CISM, CISA, CRISC or CCISO. Demonstrated equivalent experience counts.
- Experience in logistics, transportation, brokerage or another high-volume, partner-connected business. Industry-specific threats such as carrier identity fraud can be learned on the job.
- Experience with AI governance and policy for enterprise AI tools.
- Bachelor's degree in computer science, cybersecurity, information technology or equivalent professional experience.
The Perks of Working With Us
- Take advantage of our comprehensive benefits package, including medical, dental, vision, life, disability, and supplemental coverage.
- Invest in your future with our matching 401(k) program.
- Build relationships and find your home at Arrive through our Employee Resource Groups.
- Enjoy office wide engagement activities, team events, happy hours and more!
- Leave the suit and tie at home; our dress code is casual.
- Work in the booming city of Austin, TX – we are in a convenient location close to the airport and downtown.
- Park your car for free on site!
- Start your morning with a specialty drink from our fully stocked coffee bar, Broker’s Brew.
- Sweat it out with the team at our onsite gym.
- Maximize your wellness with free counseling sessions through our Employee Assistance Program
- Take time to manage your physical and mental health - we offer company paid holidays, paid vacation time and wellness days.
- Receive 100% paid parental leave when you become a new parent.
- Get paid to work with your friends through our Referral Program!
- Get relocation assistance! If you are not local to the area, we offer relocation packages.
Your Arrive Experience
When we say “award-winning culture,” we mean it. We’ve been recognized as a top workplace by Inc. Fast Company, Fortune, and earned Top Workplaces and Great Place to Work, to name a few. We intend on topping many more of those lists in the years to come, but we’re not in it for the trophies. We’re committed to culture because it keeps us connected to each other and invested in our shared success while having a blast along the way. Our employee-founded resource groups create communities within Arrive’s walls, including Women in Logistics, Emerging Professionals, Prisms, Black Logistics Group, Salute and Unidos.
Notice:
To ensure a safe and transparent interview process, we want to note that Arrive Logistics adheres to strict recruitment practices. Candidates undergo an interview process, and Arrive Logistics does not provide unsolicited job offers. If you have concerns about receiving a fraudulent offer, please contact [email protected] for verification.
