Information Security Specialist

About the Role: Customer.io powers automated communication for over 8,000 companies. As our first dedicated InfoSec hire, you'll be the go-to person for securing our organizational systems, data, and operations across a globally distributed, remote-first company. You will work closely with IT, Compliance, and Platform Security to protect customer data and help the company adopt AI tools thoughtfully and securely.

What You'll Do

• Own the vulnerability management program and lead security incident response.
• Develop and maintain a practical framework for securely deploying AI tools across the organization.
• Support and improve compliance posture (SOC 2, ISO 27001), including evidence collection and audit support.
• Manage and tune security tooling (EDR, SIEM/logging, DLP, email security, IAM controls).
• Partner with Platform Security and Engineering on application security topics and conduct vendor risk assessments.

What You Bring

• 4+ years of experience in information security, cybersecurity, or a related technical discipline.
• Strong knowledge of cloud security fundamentals (AWS, GCP), endpoint protection, and identity/access management.
• Hands-on experience with compliance frameworks (SOC 2, ISO 27001) and security tooling (EDR, SIEM).
• A pragmatic, enabling mindset toward AI tools (like LLMs and coding assistants) and their responsible usage.
• Bonus: Security certifications (CISSP, CISM, CompTIA Security+) and experience evaluating AI/ML tools for data privacy.

Benefits

• Starting salary of $151,000 to $170,000 per year.
• 100% coverage of medical, dental, vision, mental health, and supplemental insurance premiums for you and your family.
• 16 weeks paid parental leave and unlimited PTO.
• Stipends for remote work and wellness, plus a professional development budget.
• Fully remote work flexibility.