CISO

Details

Glean is seeking a Chief Information Security Officer to lead security for Glean as a company and for its core product. Reporting to the CTO, this executive leader will set the strategy and operating model across product and platform security, corporate security, detection and response, risk, and compliance, turning that strategy into measurable risk reduction.

The role partners closely with Engineering, Product, Legal, IT, and company leadership to make sound security decisions at the pace of an AI company. The successful candidate should be able to go deep on architecture and incidents, build a durable security program, and communicate clearly about risk and trade-offs.

Responsibilities

• Set a risk-based security strategy, priorities, policies, metrics, and decision-making mechanisms that scale with Glean’s business.
• Give executives a clear view of material risks, remediation progress, and decisions requiring business ownership.
• Partner with Engineering and Product to build security into architecture, design, development, release, and operations.
• Guide security across application and platform layers, identity and authorization, customer-data flows, cloud environments, integrations, and AI-enabled capabilities, including models, agents, and the tools and data they can access.
• Lead a measurable vulnerability-management and secure-development program spanning threat modeling, code and dependency risk, software supply-chain security, penetration testing, bug bounty, remediation ownership, and validation.
• Use automation and AI-assisted analysis to increase security coverage and shorten time to fix.
• Oversee security for corporate systems, identity, endpoints, SaaS applications, cloud infrastructure, and privileged access.
• Ensure the organization can detect, assess, contain, recover from, and learn from security incidents.
• Coordinate incident response with Engineering, Legal, Privacy, Communications, and business leaders, and ensure corrective actions are completed and validated.
• Own security risk management, compliance strategy, audit readiness, and control effectiveness.
• Support requirements and frameworks that may include SOC 2, ISO 27001, HIPAA, PCI, and FedRAMP.
• Track outcomes in risk reduction, vulnerability remediation, incident readiness, and control effectiveness.
• Build and grow a high-performing team across security engineering, enterprise security, detection and response, and governance.
• Build strong working relationships across the company and partner with customer-facing security leaders on escalations and assurance needs.
• Contribute security expertise to commercial security products in partnership with their Product and business owners.

Requirements

• Senior security leadership experience with accountability for a broad, enterprise-scale security program at a high-growth technology or product company.
• Experience as a CISO, deputy CISO, or senior security executive is strongly preferred.
• Strong technical depth across product and application security, cloud and infrastructure security, identity and access management, secure development, and vulnerability management.
• Experience building and operating effective security, detection, and incident-response programs, including leading through high-severity incidents.
• Practical expertise in security risk management, governance, compliance, and audit readiness.
• A track record of partnering with Product and Engineering to ship secure products and embed security in fast-moving development organizations.
• Experience building, leading, and retaining multidisciplinary teams; setting priorities; allocating resources; and creating clear accountability.
• Excellent executive communication and judgment, with the ability to explain technical issues and uncertainty plainly, recommend a path forward, and escalate material risk appropriately.
• Valuable experience includes securing enterprise AI, machine-learning, LLM, or agentic systems; data handling; model and application boundaries; tool access; adversarial testing; AI-enabled security analysis; regulated customers or programs such as FedRAMP; or public-company and IPO-level governance and disclosure expectations.
• Candidates will complete a brief AI-focused exercise or discussion during the interview process.

Location

• Hybrid, four days per week in Glean’s San Francisco Bay Area office.

Compensation and Benefits

• Standard base salary range: $424,300–$489,400 annually.
• Certain roles may be eligible for variable compensation, equity, and benefits.
• Medical, vision, and dental coverage.
• Generous time-off policy.
• 401(k) plan.
• Home office improvement stipend.
• Annual education and wellness stipends.
• Regular company events and healthy lunches daily.
• Commitment to a diverse and inclusive workplace.