Senior Director of Information Security

Job Description

Rent the Runway is seeking a highly motivated Senior Director of Information Security to lead its information security program and protect corporate and customer assets. This role is crucial in establishing and maintaining a robust security posture, adhering to NIST best practices, and ensuring compliance with relevant regulations. The Director will oversee all Information Security efforts including Governance, Risk, and Compliance (GRC), Fraud Prevention, and Privacy compliance initiatives, playing a key role in safeguarding data and maintaining customer trust. The Senior Director will report to the VP, CISO and work collaboratively with the other members of RTR’s teams.Responsibilities include:

• Developing and implementing a comprehensive information security strategy.
• Directing the implementation and management of the NIST Cybersecurity Framework.
• Establishing and maintaining a robust GRC program.
• Developing and implementing fraud prevention strategies.
• Overseeing PCI-DSS compliance.
• Building and managing the technical and operational aspects of RTR’s privacy compliance program.
• Leading the development and execution of the incident response plan.
• Collaborating with IT and engineering teams to integrate security best practices.
• Driving the implementation of secure software development lifecycle (SSDLC) practices.
• Overseeing the security of cloud environments and datacenter infrastructure.
• Managing third-party vendor security risks.
• Building, mentoring, and leading a high-performing information security team.
• Providing regular updates to senior management on the organization's security posture.

Requirements include:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
• Deep knowledge and practical experience with the NIST Cybersecurity Framework.
• Proven experience in developing and managing GRC programs.
• Demonstrated experience in fraud prevention strategies and techniques.
• Strong understanding of privacy laws and regulations.
• Extensive knowledge of security technologies and best practices.
• Excellent leadership, communication, and interpersonal skills.
• Relevant certifications such as CISSP, CISM, or CISA are strongly preferred.

Rent the Runway offers:

• Paid Time Off
• Universal Paid Parental Leave
• Paid Sabbatical after 5 years
• Exclusive employee subscription and rental discounts
• Comprehensive health, vision, dental, FSA and dependent care
• 401k match
• Company wide events and outings
• Option to work remotely on Fridays