Chief Information & Security Officer

About the role

#Team Nextdoor

Nextdoor is the essential neighborhood network. Neighbors, public agencies, and businesses use Nextdoor to connect around local information that matters in more than 350,000 neighborhoods across 11 countries. Nextdoor builds innovative technology to foster local community, share important news, and create neighborhood connections at scale. Download the app and join the neighborhood at nextdoor.com.

Overview

As Nextdoor's Chief Information and Security Officer, you will own enterprise and product security, and oversee corporate IT and internal business systems, both led by experienced leaders already in place. You will protect the company, its data, and the Nextdoor platform, working closely with Engineering. Candidates must have deep experience in enterprise and product security and AI; experience in IT and business systems is preferred. This role reports to Nextdoor's Chief Financial Officer and would be based in Dallas, TX.

Your responsibilities will include

Enterprise and Product Security

• Own Nextdoor's security program end to end, including strategy, policies, risk assessments, and employee training, with a roadmap tied to the company's biggest risks and progress reported through clear metrics
• Regularly report on security risks to the executive team and the Audit & Risk committee of the Board, and work with Legal on timely assessment and disclosure of material incidents as a public company
• Set security standards for the Nextdoor platform (mobile apps, web, APIs, and cloud infrastructure) and partner with Engineering, which is accountable for fixing issues, to build security into how software is designed, built, and released
• Run application security, including code review, dependency scanning, penetration testing, vulnerability management, and a responsible disclosure or bug bounty program, and lead security reviews of new products, features, and third-party code
• Protect member and customer data through encryption, access controls, and monitoring, and work with Legal on privacy requirements in the countries where we operate
• Run threat detection and monitoring across devices, cloud, the platform, and business systems, with outside providers where needed, and keep a tested incident response plan (including for a product data breach) with regular exercises with Engineering and Legal
• Secure corporate and business systems (devices, logins, email, Slack, and the systems that hold customer and financial data), and assess and manage security vendors and third-party providers
• Lead security audit and compliance work, including SOX, IT general controls, SOC 2, and ISO 27001, in partnership with Internal Audit

Business Systems

• Oversee the teams that run Workday (ERP and HCM) and Salesforce (Sales & Service Cloud)
• Partner with the business systems leaders on the integration and automation of business systems across Finance, People, Customer Operations and Revenue Operations

Corporate IT

• Oversee corporate IT operations, including identity and access (Okta), device management (Jamf), Google Workspace, Slack, IT asset management, and helpdesk
• Set the security approach for employee AI tools: which tools are approved and how company data is protected
• Oversee AI tool spend and adoption

General

• Set the strategy, roadmap and OKRs for security, IT and business systems, and align them with company priorities and stakeholders
• Lead, mentor, and develop a high-performing technology team
• Manage the IT budget and software spend, including forecasting, vendor management, and contract negotiation
• Stay on top of emerging threats and technology trends and assess their potential impact on the business

What You'll Bring To The Team

• 10+ years of experience in security, including several years leading security teams
• Experience building and leading a security team, including application security engineers and outside providers
• Deep, hands-on experience running a security program for both a corporate environment and a consumer-scale product, including application security, cloud infrastructure security, and secure software development
• Track record of working with engineering teams to fix vulnerabilities and change how software gets built, without slowing delivery
• Experience leading the response to a real security incident, including working with outside responders, Legal, and Communications
• Experience securing a public company or other SOX-regulated environment, with familiarity with SOC 2 or ISO 27001 audits and vendor security reviews
• Working knowledge of endpoint detection and response, security monitoring, and identity and access management tools (we use Okta)
• Familiarity with rolling out AI tools across a company and measuring adoption and spend
• Experience driving cross-team change while aligning diverse stakeholders
• Strong leadership and interpersonal skills, with an emphasis on mentoring and coaching team members

Nice to have

• Security certification such as CISSP or CISM
• Experience connecting business systems with integration platforms such as Workato, MuleSoft, or Zapier, and building or governing automated AI workflows with human oversight
• Strong technical and functional background in ERP and CRM systems, and hands-on experience with the tools we run today: Jamf, Okta, Google Workspace, Slack, Salesforce, Workday, Glean, and Workato
• Experience leading or partnering with business systems teams

Rewards

Compensation, benefits, perks, and recognition programs at Nextdoor come together to create our total rewards package. Compensation will vary depending on your relevant skills, experience, and qualifications.

Pay and benefits

The starting salary for this role is expected to range from $260,000 to $340,000 on an annualized basis, or potentially greater in the event that your 'level' of proficiency exceeds the level expected for the role. The salary range will be determined by the candidate's geographic location.

We expect to award a meaningful equity grant for this role. With quarterly vesting, your first vest date will take place within 3 months of your start date.

When it comes to benefits, we have you covered! Nextdoor employees can choose between a variety of health plans, including a 100% covered employee only plan option, and we also provide a OneMedical membership for concierge care.

At Nextdoor, we empower our employees to build stronger local communities. To create a platform where all feel welcome, we want our workforce to reflect the diversity of the neighbors we serve. We encourage everyone interested in our mission to apply.

For information about our collection and use of applicants' personal information, please see Nextdoor's Personnel Privacy Notice, found here.