Director, Information Security

Etsy is hiring a Director of Security to protect our marketplace, products, data, and enterprise technology. This leader will set the security strategy, guide investment decisions, and help teams build and operate secure services.

The role oversees application and product security; cloud and infrastructure security; identity, endpoint, and corporate platform security; security operations and incident response; and security governance, risk, and compliance.

This is a full-time position reporting to the VP of Engineering, CISO.

What’s this team like at Etsy?

Etsy’s security teams build tools, operate defenses, advise colleagues, and respond to incidents. They work with engineering and business teams to identify risks and make secure decisions easier.

The team tests and measures its work, uses continuous deployment, and learns from incidents through a blameless approach. Leaders support clear ownership, shared learning, and career development.

What does the day-to-day look like?

• Set the security strategy and roadmap. Manage organizational design, staffing, budgets, tools, and service providers, with priorities based on business needs and security risk.
• Develop security engineers, analysts, architects, and managers. Establish clear responsibilities and support professional growth.
• Guide vulnerability management, detection, threat intelligence, and incident response. Maintain tested response plans, coordinate communications, and partner on business continuity and recovery exercises.
• Integrate security into product development and enterprise technology. Partner on architecture reviews, threat modeling, security testing, and controls for cloud services, identity, endpoints, and corporate systems.
• Oversee security policies, risk assessments, audit readiness, and supplier security. Report metrics that show security coverage, remediation progress, and incident trends, and explain risks and investment decisions to executives and business partners.

…