Constructor
Director of Information Security
Remote work allowed only within certain countries or regions.
Europe
Employer listed it 3 weeks ago · Added yesterday
Been open since 3 weeks ago, still checked daily, but it has been live a while.
Salary
Not stated
Location
Europe
Timezone
CET ±2
Contract
Full-time
Experience
Lead
Category
Software
This employer didn't state pay. Jobs like this usually pay around $200k–$275k a year, a typical range taken from 596 lead-level software roles on Nomaders that do state pay. It's a guide, not an offer.
Remote flexibility
Region Restricted
Remote work is allowed, but only for candidates based in Europe.
What the employer says
- Source listing states candidate location: "Remote - EMEA, Remote - Croatia, Remote"
What Nomaders makes of it
- Applications outside the listed area are usually rejected
- Timezone overlap with the listed area is often expected
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
About the role
About You
As Director of Information Security, you will own Constructor's security program end-to-end — protecting our platform, our customers' data, and our team. You'll report to the CIO and serve as the company's senior security leader, responsible for everything from compliance frameworks and incident response to hands-on prospect engagements and internal policy. This is a high-autonomy role where you'll shape strategy and execute it yourself in a lean, engineering-driven organization.
About Us
Constructor is the only search and product discovery platform tailor-made for enterprise ecommerce where conversions matter. Constructor's AI-first solutions make it easier for shoppers to discover products they want to buy and for ecommerce teams to deliver highly personalized experiences that drive impressive results. Optimizing specifically for ecommerce metrics like revenue, conversion rate and profit, Constructor generates consistent $10M+ lifts for some of the biggest brands in ecommerce, such as Sephora, Petco, home24, Maxeda Brands, Birkenstock and The Very Group. Constructor is a U.S. based company that was founded in 2015 by Eli Finkelshteyn and Dan McCormick.
About the Position
The Director of Information Security’s responsibilities will include:
Customer trust & sales enablement — Answer prospect security questions, review and finalize security questionnaires, and meet directly with prospects and customers to represent Constructor's security posture
Compliance & audit — Own SOC 2 Type II and ISO 27001 certification programs, manage external auditors, maintain controls, and ensure continuous compliance
Incident response — Own all security incidents from detection through resolution and post-mortem; maintain and improve the incident response plan
Risk management — Conduct ongoing risk assessments, maintain the risk register, and present risk posture to leadership and the board
Access governance — Run quarterly access reviews across all systems; ensure least-privilege principles are enforced
Internal advisory — Field "Can I use this?" questions from employees evaluating new tools, vendors, and workflows
AI governance — Define and maintain guardrails for internal AI use, balancing productivity with data protection
Security exercises — Plan and execute tabletop exercises, simulated incidents, and red/purple team engagements
DLP & insider threat — Oversee the data loss prevention program, triage alerts, and refine policies
Vendor security — Review third-party vendor security posture and manage the vendor risk assessment process
Security awareness — Maintain the employee security training program and foster a security-conscious culture
Infrastructure security partnership — Collaborate with Platform Engineering on cloud security posture (AWS), container security, and vulnerability management
Requirements
5+ years of experience in information security, with at least 2 years in a senior or leadership role
2+ years hands-on experience in a DevOps or Platform Engineering role
Proficiency with AI tools like Claude Code
Deep familiarity with compliance frameworks (SOC 2, ISO 27001, GDPR, CCPA)
Experience owning incident response end-to-end in a SaaS or cloud-native environment
Requirements
- ·About the Position
- ·The Director of Information Security’s responsibilities will include:
- ·Customer trust & sales enablement — Answer prospect security questions, review and finalize security questionnaires, and meet directly with prospects and customers to represent Constructor's security posture
- ·Compliance & audit — Own SOC 2 Type II and ISO 27001 certification programs, manage external auditors, maintain controls, and ensure continuous compliance
- ·Incident response — Own all security incidents from detection through resolution and post-mortem; maintain and improve the incident response plan
Benefits
- ·🏝️ Unlimited vacation time -we strongly encourage all of our employees take at least 3 weeks per year
- ·💰 A competitive compensation package including stock options
- ·🌎 Fully remote team - choose where you live
- ·🛋️ Work from home stipend! We want you to have the resources you need to set up your home office
- ·💻 Apple laptops provided for new employees
How to apply
- 1Check the flexibility label above, region restricted, matches where you plan to live and work.
- 2Tailor your CV to the role at Constructor, mentioning your remote working experience and working hours (CET ±2).
- 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.
Found 1d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar roles
Other open software roles with comparable remote rules.
Free to apply, no account needed.
Typically $200k–$275k · You'll be taken to the employer's careers page.