Vimeo supports over 287M users, 1.6M+ paid subscribers, & 100B+ video views. We are hiring a CISO to build & evangelize a comprehensive security practice across all parts of Vimeo. The role will lead teams across application security, infrastructure security, compliance, IT, & security engineering. The CISO will interact with Vimeos Board & Executive team, & will represent security practices & concerns to internal teams, vendors, & clients.

What you'll do:

• Assess the current state of Vimeos security practices, highlighting areas for immediate & long-term changes
• Build an Enterprise Product Security function from the ground up with developers that will protect our Enterprise users 
• Develop Vimeos security roadmap throughout our security engineering practice, building a strong security engineering function to effectively identify vulnerabilities before production & investing in automation & machine learning techniques where possible
• Manage & provide actionable insights to engineering from HackerOne, pen tests & PCI compliance reports 
• Ensure risk controls are implemented & fully monitored throughout our system lifecycle
• Evangelize security-first practices, policies, & procedures across the broader company - particularly all teams building code - & ensure updated documentation & processes to address vulnerabilities in production
• Oversee Vimeos security Governance, Risk & Compliance programs
• Own all Security Events & Incident Management (SEIM)
• Set the vision of the IT Employee Experience department with a clear roadmap
• Stay abreast of the shifting security landscape, & communicate across Executive teams to ensure alignment

Skills & knowledge you should possess:

• 10+ years of experience in information security, preferably at a B2B SaaS company
• 5+ years of experience managing medium to large security teams
• Degree in Computer science or an equivalent related technical field
• Ability to collaborate across teams, drive initiatives forward, & influence the business
• Proven experience hiring security professionals & building a safe, collaborative, high performing Engineering department & culture 
• Values & celebrates teams comprised of diverse perspectives
• CISSP, CISM, or other similar security certification(s), as well as the ability to drive technology compliance & certification efforts with our sales, legal & compliance functions
• Knowledge of & passion for emerging security technologies & products, such as Prism, Threat Stack, WAF, & GCP tools to support threat management
• Familiarity with GDPR, experience in a UGC (user generated content) environment a plus
• Demonstrated ability to set the vision of Workforce security

Targeted Base Salary Range:  $249,000 to $370,000