<div><h2><span></span></h2> <h2><span>Why Openly</span></h2> <p><span>Openly is rebuilding insurance from the ground up. We are re-envisioning and enhancing every aspect of the customer experience. Doing this requires a rapidly growing team of exceptional, curious, empathetic people with a wide range of skill sets, spanning technology, data science, product, marketing, sales, service, claims handling, finance, etc. </span></p> <h2><span>The Openly Difference</span></h2> <p><span>We created Openly because we saw an evident gap in the market for premium insurance made simple. Consumers deserve more complete coverage at competitive prices. </span></p> <ul> <li><span><span><strong>The Price Difference</strong>: </span>Using cutting-edge data and technology, we provide you with customizable, competitive prices to protect your most valuable assets.</span></li> <li><span><strong><span>The Policy Difference:</span></strong> Coverages are truly customizable to meet your individual protection needs, for both standard coverages and optional add-ons.</span></li> <li><span><span><strong>The Experience Difference:</strong></span> From tailored claims handling to highly responsive customer service, we are focused on making the home insurance purchasing process a better overall experience.</span></li> </ul> <h2><span>Welcome to your next adventure.</span></h2> <p>At Openly, our people are just as important as our product. For us, collaboration, communication, and work-life balance are more than nice-to-haves— they’re the must-haves that make us who we are. We believe a great company is the result of a shared set of values, so we look for these qualities in every candidate we hire. </p> <ul> <li>Integrity</li> <li>Empathy</li> <li>Teamwork</li> <li>Curiosity</li> <li>Urgency</li> </ul> <p><span>Weve designed our hiring process with you, the candidate, in mind. At every step, you have the chance to present your strengths and learn more about what makes Openly a great place to work.</span></p> <h2><span>Were committed to Diversity, Equity, &amp; Inclusion</span></h2> <p><span>We embrace individuality and believe diverse teams are winning teams. Our commitment to inclusion across race, gender, age, religion, identity, and experience drives us forward every day.</span></p></div><p><strong>Job Details </strong></p> <p>As the Director of Information Security at Openly, you will be responsible for maintaining and maturing the companys security program. This involves collaborating with cross-functional teams to identify and mitigate risks, establishing security policies and procedures, and ensuring compliance throughout the organization. You will apply a risk-informed approach to security and compliance, enabling the business to operate safely and securely.</p> <p><strong>Key Responsibilities </strong></p> <ul> <li>Develop and execute a comprehensive information security roadmap in collaboration with technology leadership and compliance leadership.</li> <li>Provide oversight for security governance and risk management, including risk assessments, vulnerability management, and incident response planning.</li> <li>Promote a culture of security awareness throughout the organization by conducting training sessions and awareness campaigns.</li> <li>Provide regular updates and reports to senior management and stakeholders on the state of information security within the organization.</li> <li>Lead SOC II Type II audit including audit coordination, controls, and evidence collection.</li> <li>Evaluate and manage security risks associated with third-party vendors and service providers.</li> <li>Establish and maintain information security policies, standards, and procedures in compliance with relevant industry regulations (e.g., GDPR, PCI DSS, state Insurance Data Security laws) and best practices.</li> </ul> <p><strong>Qualifications</strong></p> <ul> <li><strong>Education: </strong>BS degree in Computer Science, IT, related technical discipline or equivalent years of experience.</li> <li><strong>Experience</strong> <ul> <li>8+ years of experience in information security roles with a balance of management, compliance, and technical expertise.</li> <li>Proven management abilities <ul> <li>Experience guiding and growing teams of teams, balancing security, compliance and engineering needs with the needs of the business.</li> <li>Demonstrated ability to leverage resources and teams to deliver multiple projects from start to finish in reasonable overlapping time frames</li> <li>Experience developing a strategy or roadmap for your teams</li> </ul> </li> <li>Proven experience leading SOC II audits and evidence collection</li> <li>Familiarity and willingness to work with Agile methodologies</li> <li>Excellent written and verbal communication</li> <li>CISSP, CISM, or other cybersecurity certifications preferred, but not required</li> <li>Working knowledge of one or more public cloud technologies (AWS, Azure, Google Cloud) and information security in a hybrid cloud environment</li> <li>Risk management experience</li> <li>Knowledge of PCI Data Security Standards including scoping and implementation</li> <li>Working knowledge of PAM, SIEM, SSO, WAF, endpoint detection, and email threat management technologies</li> <li>Startup or SaaS and remote work experience preferred</li> </ul> </li> </ul> <ul> <li><strong>Leadership</strong> <ul> <li>Defaults to a collaborative mindset to work with multiple stakeholders to maximize our resources</li> <li>No Egos - focuses on the best outcomes for the security, engineering, and IT teams and the company over ownership of any particular project, process, or people, demonstrating high engagement and low attachment</li> <li>Comfortable making decisions,owning and being accountable for results</li> <li>A high level of comfort navigating and making decisions and recommendations in environments of ambiguity</li> <li>Bias towards action over perfection</li> <li>Ability to juggle both a long term investment approach and an iterative approach to address immediate needs while understanding long term implications</li> <li>When presented with a complex problem, process, or existing system, you can consistently reduce the complexity to get more done with less work</li> <li>Passion for fostering DE&amp;I to build effective, capable teams</li> </ul> </li> </ul> <ul> <li><strong>Technical Acumen</strong> <ul> <li>A breadth of knowledge and experience across the information security domain, with familiarity in a combination of endpoint, email, network, identity management, cloud security; vulnerability management; incident response; and threat intelligence.</li> <li>Extensive experience with common security tools - e.g., EDR, MDR, SIEM, CSPM, email security, web filtering, and threat intel platforms.</li> <li>Experience with incident management and security operations including analyzing and responding to security events, such as conducting log analysis, developing queries and analytics, troubleshooting security issues, and correlating complex data sets.</li> <li>Experience with Okta, Google Workspace, Jira, and other SaaS applications.</li> <li>Experience with public cloud infrastructure (e.g. GCP, AWS) implementation and architecture.</li> <li>Knowledge of scripting languages.</li> <li>Knowledge of Terraform or other infrastructure-as-code frameworks.</li> <li>Knowledge of version control systems (Github, Git, etc.).</li> </ul> </li> </ul> <p><strong>Our stack </strong><em>(for reference)</em></p> <p>We do not expect competency in this stack to be successful, but awareness in security concerns associated is a plus: <em> </em></p> <ul> <li>Backend/Core: Go &amp; Postgresql</li> <li>Frontend: Browser-based, VueJS, Webpack, Nuxt &amp;, Tailwind</li> <li>Research/Data Science: R, ArcGIS, H2O, &amp; Python</li> <li>Infrastructure: Google Cloud, specifically Cloud Run, Cloud Build, and CloudSQL, managed with Terraform. We use GitHub for code hosting and CircleCI for running our CI/CD pipelines.</li> <li>Remote work tools: Slack, Zoom</li> </ul><div><div><div><p><strong>Compensation &amp; Benefits:</strong> </p> <p>The <strong>target salary range</strong> represents the budgeted salary range for this position.  Actual compensation for this position will be determined based on the successful candidates experience and skills. We are committed to providing a compensation package that not only reflects the responsibilities and requirements of the role, but also the unique expertise that the chosen candidate will bring to our team.</p></div><div>Target Salary Range</div><div><span>$194,000</span><span>—</span><span>$230,375 USD</span></div></div><div><div><p>The full salary range shows the min to max salary range for this position.  Actual compensation will be commensurate with experience and qualifications and determined based on various factors including the candidates qualifications, skills, and experience.</p></div><div>Full Salary Range</div><div><span>$181,875</span><span>—</span><span>$303,125 USD</span></div></div></div><div><p><span><strong>Benefits &amp; Perks</strong></span></p> <ul> <li><span>Remote-First Culture - We supported #remotelife long before it was a given. Well keep promoting it.</span></li> <li><span>Competitive Salary &amp; Equity</span></li> <li><span>Comprehensive Medical, Dental, and Vision Plan Offerings</span></li> <li><span>Life and disability coverage including voluntary options</span></li> <li><span>Parental Leave - up to 8 weeks (320 hours) of paid parental leave based on meeting eligibility requirements<br />(Birthing parents may be eligible for additional leave through STD)</span></li> <li><span>401K Company Contribution - Openly contributes 3% of the employees gross income, even if the employee does not contribute.</span></li> <li><span>Work-from-home stipend - We provide a $1,500 allowance to spend on setting up your home workplace</span></li> <li><span>Annual Professional Development Fund: Each employee has $2,000 in professional development (PD) funds to spend on activities or resources annually. We want each Openly employee to achieve personal and professional success and to feel supported, confident, and informed about improving their efficiency and productivity.</span></li> <li><span>Be Well Program - Employees receive $50 per month to use towards your overall well-being</span></li> <li><span>Paid Volunteer Service Hours</span></li> <li><span>Referral Program and Reward</span></li> </ul> <p><span>Depending on position, Employees generally are eligible for cash incentive compensation, including commissions for sales eligible roles. In all cases, eligibility for compensation and benefits is subject to applicable plan and policy terms in effect from time to time.</span></p> <p><span>U.S. Citizens, Green Card Holders, and those authorized to work in the U.S. for any employer and currently residing in the US will be considered.</span></p> <p><span>Openly is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a persons race, color, sex, gender identity or expression, age, religion, national origin, ancestry, ethnicity, disability, veteran status, genetic information, sexual orientation, marital status, or any characteristic protected under applicable law. Openly is an E-Verify Employer in the United States. Openly will make reasonable accommodations for qualified individuals with known disabilities under applicable law.</span></p> <p> </p> <p><em><span>We strive to provide an exceptional applicant and candidate journey when you engage with us. In an effort to respond to applicants in a timely manner, we leverage AI to organize applications and resumes based on required and applicable skills and experience. To allow our applicants to drive their initial interview experience with us, we may leverage an AI-supported scheduling tool so you can choose when to meet with our team. While AI assists with efficiency, all hiring decisions are made by our team members. Rest assured, your data is protected according to privacy laws and company policies. Contact our recruitment team with any questions about our AI-assisted hiring process.</span></em></p></div>