Director, Enterprise Security & IT

# **At** [**Klue**](https://klue.com/)**, We’re Building the Future of Competitive Intelligence** # **We’re looking for a Security, Compliance & IT Leader 👋** As our **Director, Enterprise Security & IT**, you'll sit at the intersection of security, compliance, and IT operations. You'll be accountable for how Klue protects customer data and how every Kluebee gets equipped to do their best work. Today, these three areas sit under different teams. You'll turn them into one team with one roadmap, working alongside an Engineering org that already builds and runs our product infrastructure. **Your Mission?** To own the security and compliance posture that our customers, our sales team, and our own people rely on. That covers everything we do: from building the product, to the internal automations, to the tools we use, and how we use AI. You'll set the standard, build the systems and set the rhythm to meet it. And in the process, make the secure way, the easy way. ## **What's In It for You?** You won't inherit a playbook. You'll write it. You'll define the operating model, the culture, and the technical direction for a brand-new function, and shape a small, sharp team of 2 from day one. You'll report directly to the CTO and work closely with the Senior Leadership Team, as well as the Engineering, Product, Sales, and People teams. You'll tackle big questions like how to govern AI agents connected to company systems, and your answers will set policy at Klue. As Klue grows, so do the team and your scope. You have the power to shape what that looks like. ## **What You'll Do** - **Own security posture and incident readiness.** Mature how Klue prevents, detects, and responds to security issues. Design the incident response process and governance, and make sure everyone knows their role before something goes wrong. - **Run the compliance engine.** Own the annual audit cycle against SOC 2 Type II, NIST CSF, and BSIMM, plus penetration testing, from evidence collection to a successful finish. Build audit methodology and documentation that make reviews faster and less painful for the whole company. - **Be the security answer for go-to-market.** Keep customer questionnaires, external assessments, and audits moving on time. Review and negotiate data protection agreements and security exhibits with customers and vendors so what we sign matches what we do. - **Govern vendors, data, and privacy.** Run full-spectrum vendor reviews, including sub-processor qualification. Own DLP, data retention, and the privacy framework for an international customer base, including data subject access requests. - **Set the rules for AI and high-risk access.** Own AI security governance: policies, risk acceptance, data handling, and permissioning for AI tools, agents, and integrations connected to company systems. Define and enforce access governance for high-risk systems, including admin access reviews, service accounts vs. individual credentials, and controls on sensitive logs and data. - **Make security engineering's job easier.** Set the security and compliance standard for Engineering's security work. Give the team the tooling, policy, and guidelines to build against, and translate their technical work into terms leadership and customers can act on. - **Equip and enable every Kluebee.** Own devices, access, and tooling across the full employee lifecycle. Manage the vendors behind our IT stack, set and hit reliability targets (SLOs) for corporate systems, and replace ad hoc fixes with repeatable processes that scale. Partner with People so onboarding and offboarding run smoothly. (Product infrastructure stays with Engineering.) ## **What Success Looks Like** - **One team, one roadmap.** Within two quarters, Security, Compliance, and IT operate as one team with a shared roadmap and a regular operating rhythm. - **Customers get fast, consistent answers.** Questionnaires, audits, and sub-processor reviews are completed on time and in a repeatable way. - **AI and access are governed, not improvised.** High-risk systems and AI tools are covered by clear, documented policy, and admin access reviews are routine, not reactive. - **Corporate systems are reliable.** You define clear SLOs in your first quarter, and Klue meets or beats them. - **We're ready when it counts.** Incident response governance is documented and understood, and Engineering's security engineers have the tooling and guidelines to respond fast. - **Day 1 just works.** Every new Kluebee has working equipment and access on their first day, with no scrambling. - **The budget is a set of clear choices.** You actively manage the function's budget and make defensible tradeoffs between tooling, vendors, and headcount. - **You're the default owner.** The CTO and SLT turn to you for security, compliance, and IT. Engineering and GTM teams see you as the partner who makes their job easier, not another layer to work around. ## **What You Bring** **Must Haves** - You've run security and compliance at a B2B SaaS company handling sensitive customer data. You're comfortable owning DLP, data retention, and privacy frameworks, and you can work through a security questionnaire or audit without panic. - You've led IT operations for a whole company, covering equipment, access, and tooling. - You know security frameworks (SOC 2, ISO 27001, NIST) and global privacy regulations (GDPR, CCPA) in depth. - You're comfortable with ambiguity and building without a playbook. - You communicate clearly with both technical peers and non-technical leaders, and can explain a risk to an engineer and to a CEO. - You've negotiated data protection agreements and security exhibits in vendor and customer contracts. - You understand AI security and governance: data retention commitments, access and permissioning for AI agents and integrations, and risk acceptance for AI tooling. - You've worked closely with product and engineering teams to turn security and compliance goals into reality. **Nice-to-Haves** - You've owned a DevOps and/or security engineering function inside a larger engineering org. - You've brought previously siloed security, compliance, and IT teams together under one roof. - You know privacy and data residency frameworks for an international customer base. - You've managed distributed or hybrid teams. # ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ ⬇️ Not ticking every box? That’s okay. We take potential into consideration. An equivalent combination of education and experience may be accepted in lieu of the specifics listed above. If you know you have what it takes, even if that’s different from what we’ve described, be sure to explain why in your application. At Klue, we're committed to building a high-performing team where people feel a strong sense of belonging, can be their authentic selves, and are able to reach their full potential. If there’s anything we can do to make our hiring process more accessible or to better support you, please let us know, we’re happy to accommodate. ## ## **Why Klue Might Be the Perfect Fit For You** At Klue, you’ll push the boundaries of what’s possible. For yourself, your team, and our customers. The environment here feels more startup than corporate. You’ll roll up your sleeves, build, iterate, and level up. This is a place where your ideas matter, you can shape what comes next, and leave your mark. If you’re looking to join a category-defining company… where you own big outcomes, influence real customers, and work with smart, gritty people… you’ll thrive here. **Unlock Your Potential. Take Risks. Take Action. Innovate** ## **How We Work at Klue** We love the balance of connection and flexibility. We work **Office-First**, with ahybrid touch, and work together in our vibrant offices on **Mondays, Wednesdays & Thursdays** to collaborate, brainstorm, and build together. Our main hiring hubs are in: - **🇨🇦 Vancouver (HQ)** - **🇨🇦 Toronto** - **🇬🇧 London** ## **Our Commitment to You** - **High Performance Culture.** We reward high performance and growth through career development, coaching, and annual performance reviews. - **Comprehensive benefits:** Extended health & dental coverage that starts on Day 1. Fun perks like discounts at Goodlife and Perkopolis are gravy. - **Ownership:** All full-time employees have the opportunity to participate in our Employee Stock Option Plan. - **Our Vacation Policy** is *Take The Time You Need.* We just ask that you give notice and don’t leave your team hanging. - **Top-tier tools.** All employees will receive a Mac (or PC, if that’s your jam) and access to A+ tooling. - **AI First.** All employees are encouraged to lean into AI to work smarter and faster. Built something cool lately? Show us at our Friday Show, Don’t Tell Meetings. - **Growth / Leadership.** Direct access to our leadership team, including our CEO, and opportunities to connect with incredible people across the company. - **Social connection.** There’s no shortage of ways to stay connected and have fun. We get together once a year in Vancouver for a company- wide kickoff. Throughout the year our Hubs hold regular social events. - **Dog-friendly spaces.** Bring your four-legged friend along in Vancouver or Toronto, as our offices are pup-approved. ## **About Klue** We’re on a mission to help organizations stop losing winnable deals. [Klue’s AI agents](http://klue.com) generate market, competitor, and buyer insights in a unified platform. We ensure it’s trustworthy, automated, and activated across every department, so they have the answers they need to own their market. ✨ Here’s what makes us tick: - **Klue is AI-first at its core.** It’s wired deep into our internal processes and tooling, powering our small but mighty team. It drives Klue’s autonomous agents that handle the heavy lifting for customers: collecting intel, generating insights, and ensuring content is updated and available across departments. Our agents help them scale their impact, stay ahead of the market, and reclaim the time that used to be consumed by manual, repetitive busywork. - **Competitor Insights.** Klue helps revenue teams win more competitive deals by turning market, competitor, and buyer signals into insights teams can actually use. Our AI analyzes calls, CRM data, and real buyer feedback to give product marketers and sellers a clear picture of what’s happening in their market and why deals are won or lost. We’re a curious, collaborative team building a platform that helps companies compete with confidence, and we’re looking for people who want to do meaningful work alongside others who care about craft and impact. - **A culture of curiosity, ownership and winning together**. We’re a fast-growing, globally-distributed team based in Vancouver (with hubs like Toronto), scaling quicker than ever. We value people who own their domain, act boldly, stay curious and thrive in a collaborative, high-performance environment. **Explore More** - [Klue Blog](https://klue.com/blog/why-sales-needs-more-women) - [Ignition Acquisition](https://klue.com/blog/klue-acquires-ignition) (2025) - [](http://Goldpan.ai) [Acquisition](https://techcouver.com/2025/03/18/klue-acquires-goldpan-to-advance-ai-driven-win-loss-research/) (2025) - [Win-Loss Acquisition](https://klue.com/win-loss?utm_campaign=DoubleCheck%20Acquisition) (2023) - [Series A](https://klue.com/blog/seriesa-announcement) (2020) - [Series B](https://hubs.la/H0_ZR2v0) (2021) - [Culture](https://www.bcbusiness.ca/Entrepreneur-of-the-Year-2023-How-competition-and-camaraderie-drive-the-pair-behind-Klue), [culture](https://klue.com/blog/klue-wins-award-for-corporate-culture), [culture](https://klue.com/blog/klue-wins-tech-culture-of-the-year-at-2021-bc-technology-impact-awards)! - [Customer Stories](https://klue.com/customers?utm_source=chatgpt.com) - [Glassdoor](https://www.glassdoor.ca/Overview/Working-at-Klue-EI_IE2919580.11,15.htm) - [About Us](https://klue.com/blog) - [Instagram](https://www.instagram.com/kluein/?hl=en) - [LinkedIn](https://www.linkedin.com/company/klue/?originalSubdomain=ca) - [Wellfound (AngelList)](https://angel.co/company/klue) - [Product Demo Arena](https://klue.com/demo-arena) *By submitting your application, you agree that Klue may collect your personal data for recruiting, global organization planning, and related purposes. We may use automated or AI-assisted tools to support our recruitment process. All hiring decisions are made by our hiring team*