<p>Location: Remote</p><br/><p>Employment Type: Salaried, Full-Time</p><br/><p>Team: Product Management</p><br/><div><b style="font-size: 12pt">Formstack improves people’s lives with practical solutions to their everyday work. We are looking for the next Stacker to help us accomplish this mission. </b></div><div>&nbsp;</div><div><span style="font-size: 11pt">Formstack is a </span><b style="font-size: 11pt">remote-first </b><span style="font-size: 11pt">company with team members who live and work across the U.S., Canada, and the globe. We offer more than just a job; we provide a community where you can learn, grow, and thrive your way. Join a dynamic and diverse team that values relationships as much as results. Come build what matters with Formstack.</span></div><div><br></div><div><a href="https://www.linkedin.com/in/richardyu42/" class="postings-link">Rich Yu,</a> Chief Product Officer at Formstack, is looking to hire someone to complement and strengthen the team.&nbsp;</div><div><br></div><div><b>What You’ll Do</b></div><div>As a Head of Information Security and Privacy, you will set out the security &amp; data privacy strategy for Formstack, implement standards, and monitor compliance against security and data privacy policies by providing services and solutions to protect the value and use of Formstack and its customers' information.&nbsp;&nbsp;</div><div><br></div><div><b>How You’ll Succeed  </b></div><div> - Manage processes that promote security and protect the data privacy of customers and personnel.</div><div> - Instill security awareness in the personnel base </div><div> - Own and communicate security risks, priorities, and incidents to appropriate&nbsp;leaders </div><div> - Document, implement, enforce and maintain an overarching corporate information security policy and underlying security controls.</div><div> - Maintain certifications, reports, and attestations (SOC 2 Type 2, ISO 27001, PCI DSS, etc.)</div><div> - Guide security engineering on InfoSec/AppSec standards, auditing, and&nbsp; penetration testing</div><div> - Develop training materials and conduct information security and privacy&nbsp;awareness training for personnel</div><div> - Manage customer security assessments, including review of security contract terms and completion of questionnaires</div><div> - Continually evolve and update privacy, security, and information management policies and procedures.</div><div> - Ensure ongoing monitoring, auditing, and testing of the privacy program to confirm all facets function as intended</div><div> - Manage registrations and filings with applicable data protection authorities and/or agencies</div><div> - Maintain compliance with the Data Protection Requirements</div><div>  - Respond accordingly to data subject access requests (DSAR) from customers or prospects</div><div>  - Manage vendor risk management to vet and audit vendors and ensure compliance with company security and privacy requirements</div><div> - Coordinate with various business stakeholders to ensure new and existing products and processes comply with applicable data privacy requirements. </div><div> - In conjunction with Security Council, manage investigations relating to the company’s privacy and security programs</div><div> - Other duties as assigned</div><div><br></div><div><b>What We’re Looking For</b></div><div> - 6-7 + years in an Information Security and Privacy or similar role. SaaS experience is a plus.&nbsp;</div><div> - Experience in managing SOC 2 Type 2, ISO 27001, PCI DSS certifications.</div><div> - Relevant Professional certification preferred: CISSP, CISA, CISM or CRISC.&nbsp;</div><div> - In-depth familiarity with risk methodologies and industry security-related frameworks.</div><div> - Good understanding of popular application security and data-privacy standards.</div><div> - Experience leading change in a dynamic environment and ability to build consensus.</div><div> - Succinct Communicator - the ability to break down complex issues and communicate at all organizational levels.</div><div> - Ability to work in a cross-functional matrix environment.</div><div> - Excellent understanding of vulnerability management and associated tools and solutions.</div><div> - Interpersonal and collaborative skills to establish and maintain effective working relationships.</div><div> - Demonstrated ability to develop and mentor teams.</div><div> - Demonstrated inclusive leadership that embraces diversity.</div><div> - Highly motivated. Ability to work under pressure and own initiative.</div><div> - Solution-driven with demonstrated ability to meet deadlines and deliver results.&nbsp;</div><div><br></div><div><b>Salary Range: $170,000-$200,000 per year (USD) + up to 15% of base salary. </b></div><div><br></div><div><br></div><div><b>**This is a remote position **</b></div><div><br></div><div><br></div><div><b>What Formstack Offers for Full-Time Employees in the US and Canada:</b></div><div><br></div><div>- Competitive health plans, Dental, Vision, Disability, and Life Insurance Benefits for US and Canadian full-time employees.</div><div>- Monthly Health &amp; Wellness and Technology stipends</div><div>- Half-day Fridays</div><div>- Unlimited PTO for all employees.</div><div>- 401k &amp; Roth w/ safe harbor match (the US and Canada)</div><div>- The most up-to-date technology, including company-issued Macs, the latest software, and other tools needed to excel at your job</div><div>- Company-paid conferences and extended learning opportunities</div><div>- Yearly company and team gatherings</div><div><br></div><div><b>Don’t meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every qualification. Formstack is dedicated to building a diverse, inclusive, and authentic workplace. if you’re excited about this role, but your experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.</b></div><div><br></div><div><b>Formstack is an equal-opportunity employer. We are passionately committed to equitable hiring and boldly dedicated to diversity in our work and staff. We do not discriminate in employment opportunities or practices based on actual or perceived race, color, religion, national origin, sex (including pregnancy, childbirth, or related conditions), age, marital status, sexual orientation, gender identity or expression, veteran status, uniform service member status, disability or any other characteristic protected by law. Women, people of color, bilingual and bicultural individuals, LGBTQ+ persons, and people with disabilities are encouraged to apply.</b></div><div><br></div><div><i><b>All data collected in our application process, from resume collection to application questions, is used for recruitment purposes only.</b></i>&nbsp;We will store it in our applicant tracking system, Lever, and will not share this data with anyone else. We will keep your data until the role is filled and only continue to store it if we feel you may fit future roles.</div>

Location: Remote

  

Employment Type: Salaried, Full-Time

  

Team: Product Management

  

 **Formstack improves people’s lives with practical solutions to their
everyday work. We are looking for the next Stacker to help us accomplish this
mission.**



Formstack is a **remote-first** company with team members who live and work
across the U.S., Canada, and the globe. We offer more than just a job; we
provide a community where you can learn, grow, and thrive your way. Join a
dynamic and diverse team that values relationships as much as results. Come
build what matters with Formstack.

  

[Rich Yu,](https://www.linkedin.com/in/richardyu42/) Chief Product Officer at
Formstack, is looking to hire someone to complement and strengthen the team.

  

 **What You’ll Do**

As a Head of Information Security and Privacy, you will set out the security &
data privacy strategy for Formstack, implement standards, and monitor
compliance against security and data privacy policies by providing services
and solutions to protect the value and use of Formstack and its customers'
information.  

  

 **How You’ll Succeed**

\- Manage processes that promote security and protect the data privacy of
customers and personnel.

\- Instill security awareness in the personnel base

\- Own and communicate security risks, priorities, and incidents to
appropriate leaders

\- Document, implement, enforce and maintain an overarching corporate
information security policy and underlying security controls.

\- Maintain certifications, reports, and attestations (SOC 2 Type 2, ISO
27001, PCI DSS, etc.)

\- Guide security engineering on InfoSec/AppSec standards, auditing, and
penetration testing

\- Develop training materials and conduct information security and privacy
awareness training for personnel

\- Manage customer security assessments, including review of security contract
terms and completion of questionnaires

\- Continually evolve and update privacy, security, and information management
policies and procedures.

\- Ensure ongoing monitoring, auditing, and testing of the privacy program to
confirm all facets function as intended

\- Manage registrations and filings with applicable data protection
authorities and/or agencies

\- Maintain compliance with the Data Protection Requirements

\- Respond accordingly to data subject access requests (DSAR) from customers
or prospects

\- Manage vendor risk management to vet and audit vendors and ensure
compliance with company security and privacy requirements

\- Coordinate with various business stakeholders to ensure new and existing
products and processes comply with applicable data privacy requirements.

\- In conjunction with Security Council, manage investigations relating to the
company’s privacy and security programs

\- Other duties as assigned

  

 **What We’re Looking For**

\- 6-7 + years in an Information Security and Privacy or similar role. SaaS
experience is a plus.

\- Experience in managing SOC 2 Type 2, ISO 27001, PCI DSS certifications.

\- Relevant Professional certification preferred: CISSP, CISA, CISM or CRISC.

\- In-depth familiarity with risk methodologies and industry security-related
frameworks.

\- Good understanding of popular application security and data-privacy
standards.

\- Experience leading change in a dynamic environment and ability to build
consensus.

\- Succinct Communicator - the ability to break down complex issues and
communicate at all organizational levels.

\- Ability to work in a cross-functional matrix environment.

\- Excellent understanding of vulnerability management and associated tools
and solutions.

\- Interpersonal and collaborative skills to establish and maintain effective
working relationships.

\- Demonstrated ability to develop and mentor teams.

\- Demonstrated inclusive leadership that embraces diversity.

\- Highly motivated. Ability to work under pressure and own initiative.

\- Solution-driven with demonstrated ability to meet deadlines and deliver
results.

  

 **Salary Range: $170,000-$200,000 per year (USD) + up to 15% of base
salary.**

  

  

 ****This is a remote position ****

  

  

 **What Formstack Offers for Full-Time Employees in the US and Canada:**

  

\- Competitive health plans, Dental, Vision, Disability, and Life Insurance
Benefits for US and Canadian full-time employees.

\- Monthly Health & Wellness and Technology stipends

\- Half-day Fridays

\- Unlimited PTO for all employees.

\- 401k & Roth w/ safe harbor match (the US and Canada)

\- The most up-to-date technology, including company-issued Macs, the latest
software, and other tools needed to excel at your job

\- Company-paid conferences and extended learning opportunities

\- Yearly company and team gatherings

  

 **Don’t meet every single requirement? Studies have shown that women and
people of color are less likely to apply to jobs unless they meet every
qualification. Formstack is dedicated to building a diverse, inclusive, and
authentic workplace. if you’re excited about this role, but your experience
doesn’t align perfectly with every qualification in the job description, we
encourage you to apply anyway. You may be just the right candidate for this or
other roles.**

  

 **Formstack is an equal-opportunity employer. We are passionately committed
to equitable hiring and boldly dedicated to diversity in our work and staff.
We do not discriminate in employment opportunities or practices based on
actual or perceived race, color, religion, national origin, sex (including
pregnancy, childbirth, or related conditions), age, marital status, sexual
orientation, gender identity or expression, veteran status, uniform service
member status, disability or any other characteristic protected by law. Women,
people of color, bilingual and bicultural individuals, LGBTQ+ persons, and
people with disabilities are encouraged to apply.**

  

 _ **All data collected in our application process, from resume collection to
application questions, is used for recruitment purposes only.**_  We will
store it in our applicant tracking system, Lever, and will not share this data
with anyone else. We will keep your data until the role is filled and only
continue to store it if we feel you may fit future roles.

