Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 21 days ago

VP, Security

Stord98 open roles

Where
Remote, United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowVP, SecurityStord · Remote, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Stord's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Stord postings stay open a median of 40 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 21 days ago

Stord median: 40 days open

The posting

ABOUT STORD

Stord is The Consumer Experience Company, powering seamless checkout through delivery for today's leading brands. Stord is rapidly growing and strategically scaling teams across the entire company, and seeking energetic experts to help us achieve our mission.

By combining comprehensive commerce-enablement technology with high-volume fulfillment services, Stord provides brands a platform to compete with retail giants. Stord manages over $10 billion of commerce annually through its fulfillment, warehousing, transportation, and operator-built software suite including OMS, Pre- and Post-Purchase, and WMS platforms. Stord is leveling the playing field for all brands to deliver the best consumer experience at scale.

With Stord, brands can increase cart conversion, improve unit economics, and drive sustained customer loyalty. Stord’s end-to-end commerce solutions combine best-in-class omnichannel fulfillment and shipping with leading technology to ensure fast shipping, reliable delivery promises, easy access to more channels, and improved margins on every order.

Hundreds of leading DTC and B2B companies like True Classic, Native, Seed Health, goodr, Sundays for Dogs, and more trust Stord to deliver industry-leading consumer experiences on every order. Stord is headquartered in Atlanta with facilities across the United States, Canada, and Europe. Stord is backed by top-tier investors including Kleiner Perkins, Franklin Templeton, Founders Fund, Strike Capital, Baillie Gifford, and Salesforce Ventures.

This is a build role, not a maintain role. You'll inherit a real foundation — SOC 2 Type II attestation across our core platforms, a public Trust Center, EU-U.S. Data Privacy Framework certification, and a small, capable team — and you'll own what comes next: the strategy, the team, the technical stack, and the operating rhythm that carry Stord through international expansion, continued M&A, AI deployment across the product, and eventual public-market scrutiny.

What You'll Own

Strategy and governance.

Set the security strategy and the multi-year roadmap. Run our program against NIST CSF 2.0 and expand audit scopes and certifications. Establish AI governance across our models, agents, and Stord Labs work.

Security operations.

Stand up 24/7 detection and response, initially through an MDR partnership, and progressively bring detection engineering in-house. Own incident response end to end — playbooks, on-call, tabletop exercises with the executive team, and the postmortems that actually change something.

Security engineering.

Build and operate the technical stack: SIEM/SOAR, EDR/XDR, cloud security posture management, API security, secrets management, and vulnerability management. Harden CI/CD across a 200+ person engineering organization — signed commits, SBOM generation, dependency and secrets scanning, SAST/DAST in the pipeline.

M&A security integration.

Stord acquires companies, and every deal brings inherited systems, credentials, and technical debt. You'll own security diligence on future targets and the integration playbook that gets acquired environments to our standard on a predictable timeline.

Product and customer trust.

Partner with Product and Engineering on secure-by-default design across Logistics, Brands, and Commerce. Own penetration testing and our bug bounty program. Be the executive voice in enterprise security reviews and questionnaires — the ones that decide whether a deal closes this quarter or next.

Resilience.

Own business continuity and disaster recovery for an operation where downtime means orders don't ship. Prove recovery works by testing it, not by documenting it.

Team.

Lead and grow a team spanning GRC, security operations, security engineering, application security, and cloud/infrastructure security, plus an MDR partner. You'll inherit the existing team, then define and hire the rest of the structure yourself.

What We're Looking For

  • 12+ years in security, including 5+ leading a security function at a SaaS or platform company.
  • Depth in cloud-native security at scale — AWS/GCP, Kubernetes, microservices, CI/CD, API security. You should be able to hold your own in an architecture review, not just read the summary.
  • Hands-on experience owning M&A security diligence and integration.
  • Track record building a security program against NIST CSF, SOC 2, and ISO 27001 — and passing the audits.
  • Experience standing up or running 24/7 detection and response, whether in-house, through MDR, or a hybrid.
  • Executive and Board communication chops. You can explain residual risk to a board, a trade-off to a CFO, and a control to an engineer, and be understood by all three.
  • Judgment about where to spend. You know which risks justify a control, which justify a conversation, and which justify neither.

Bonus Points

  • You've taken a company through IPO readiness, or operated in a public company — SEC cybersecurity disclosure, SOX IT controls, Board reporting cadence.
  • You've secured operational or physical environments — warehouses, manufacturing, robotics, OT/IoT — not just cloud.
  • You've built AI/ML security governance for production systems, ideally against NIST AI RMF.
  • EU/UK regulatory experience: GDPR, DPF, NIS2, the EU AI Act.
  • You've worked somewhere the physical world breaks when software fails.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Stord's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Stord's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Stord's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.