{"id":1255144,"url":"https://alion.io/job/dr-squatch-associate-director-cybersecurity-privacy-it","title":"Associate Director, Cybersecurity, Privacy & IT","company":{"id":673283,"name":"Dr. Squatch","domain":"drsquatch.com","url":"https://alion.io/company/drsquatch","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Marina del Rey, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":190000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"Okta","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-25T17:51:45Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-12T22:31:11Z","board_verified":true,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"Why We Exist and What We Do :\nAt Dr. Squatch (www.drsquatch.com), we’re raising the bar on men’s personal care with our line of natural, high-performance products. We’re on a high-growth, fast-moving ride, continually introducing new product categories, launching into retailers nationwide, and growing internationally. We have been recognized and certified by Great Place to Work® multiple times, and we achieved status as a certified B Corp in 2023. We are looking for passionate, talented people who want to join us in our mission to inspire and educate men to be happierand healthier!\nAbout the Role:\nDr. Squatch is looking for an Associate Director of Cybersecurity, Privacy & IT to lead three connected functions: our security program, our privacy compliance program, and the internal technology our employees use every day. You'll own the strategy, and the team for all three.\nAs part of Unilever, we now operate against a global control framework, and a meaningful share of this role is integration work: mapping our controls to enterprise standards, participating in assessment and reporting cycles, aligning identity, endpoint, and third-party risk practices, and translating between a global program and a business that still runs at startup speed. Doing that well, protecting the company without slowing it down, is the core challenge of the job.\nThis role will also continue to drive the security strategy and represent Dr. Squatch in enterprise-level security and privacy governance. You'll sit on the Technology leadership team alongside data engineering, analytics, and business systems, partner closely with eCommerce, marketing, and legal, and present directly to our executive team on risk, incidents, and investment decisions.\nThis role reports to the Sr. Director, Data & Technology.\nThis is a full-time, hybrid role based in Marina Del Rey, CA.\nThe anticipated base compensation range for this role will be $190,000 to $215,000. Compensation will be commensurate with the candidate's experience and local market rates.\nWhat You'll Do:\nCybersecurity programMaintain the cybersecurity risk register: identify risks to our data and systems, assess likelihood and impact, and prioritize what gets addressed first.\nOwn the multi-year security roadmap.\nEvaluate, select, implement, and operate security tooling across endpoint, email, identity, cloud, and application layers.\nMonitor and triage vulnerabilities and emerging threats; drive remediation to completion with the teams that own the systems.\nManage our MDR and incident response partners, and own the incident response plan, including tabletop exercises and post-incident reviews.\nRun security awareness training and phishing simulation for employees and contractors.\n\nIT and identityLead the IT function and manage the IT Manager by setting priorities and service expectations, and actively developing them toward broader ownership of IT operations over time.\nOwn identity and access management end to end via SSO, MFA, provisioning and deprovisioning, and periodic access reviews across our SaaS estate.\nOwn endpoint management and device lifecycle, from procurement through secure decommissioning.\nSet the standard for IT support responsiveness and make sure onboarding and offboarding are fast, complete, and auditable.\nOwn SaaS governance: what tools we use, who approves them, how they're reviewed for security, and what happens to the data in them.\n\nPrivacy and data protectionOwn our privacy compliance program across CCPA/CPRA, other US state privacy laws, and UK and EU GDPR.\nRun consumer rights request intake and fulfillment with Customer Support, and keep the process defensible as volume grows.\nMaintain data mapping, records of processing, retention schedules, and privacy notices; partner with Legal and outside counsel on assessments and filings.\nAdvise Marketing and eComm on consent management, cookies, pixels, and data sharing with ad and analytics partners.\nOwn third-party and vendor risk review, including DPAs and security assessments for new tools.\n\nEnterprise integration and governanceServe as our point of contact for Unilever security, privacy, and IT governance workstreams.\nMap our controls to enterprise standards, close identified gaps, and manage the reporting and assessment cadence.\nLead our part of systems and identity integration projects, negotiating sequencing and exceptions where a global standard doesn't fit a DTC business.\nPrepare Dr. Squatch for audits and control testing, and own the evidence.\n\nAI governanceOwn acceptable use, data handling, and review standards for AI tools across the company.\nAssess AI vendors for security and privacy risk before adoption, and keep an inventory of what's in use and what data it touches.\nPartner with the Data team so governance enables adoption rather than blocking it.\n\nAbout You:\n8-12 years across cybersecurity, IT, and/or privacy, including end-to-end ownership of a security program rather than a single function within one.\nDemonstrated experience applying a security and risk framework, such as NIST CSF, CIS Controls, ISO 27001, or SOC 2, in a real environment, not just on paper.\nHands-on depth in a cloud-first, SaaS-first stack: identity (Okta or equivalent), endpoint management, email security, logging and detection.\nWorking knowledge of CCPA/CPRA and GDPR, and experience operationalizing them, not only interpreting them.\nDirect people management experience, including developing a more junior manager or engineer into greater scope. You'll inherit a capable IT Manager whose growth is part of your job.\nJudgment about where to spend limited resources, and the communication skills to explain that tradeoff to executives in business terms, and to hold the line when the answer is no.\nComfort taking a vague problem and turning it into a specific, sequenced plan.\nYou get things done without perfect resources, and you act with urgency.\nYou play to win. You hold high standards, take ownership, and stay invested in the outcome.\nTeam first. You're humble, you help outside your own wheelhouse, and you're good to work with when something is on fire.\nYou can hold a security line and stay a partner to the business at the same time.\nNice to Have:\nExperience at a company operating inside a larger parent organization, or through an acquisition integration.\nEcommerce or DTC background, and familiarity with Shopify, ad platform data flows, and consumer data at scale.\nCISSP, CISM, CIPP/US, or CIPP/E.\n#LI-TC1 #LI-FULLTIME #LI-HYBRID\nWho We Are:\nOur core values come naturally and make us a better, more whole, and unique team. We are Bold & Innovative - we are creative, rethink how things are done, and find a way. We Play to Win- we have high standards, we encourage ownership of work, we are scrappy, we act with urgency, and we invest in the outcome of our work. We are Team Squatch- we are humble, help others outside our own wheelhouse, stay positive, have fun, and have approachable and transparent leadership.\nWe offer a competitive salary in a growth-focused & collaborative team environment. Benefits include medical, dental, vision, 401k with Squatch match, and PTO. We also have great perks like healthy snacks, frequent company events, and of course, free products!\nFor Applicants with Disabilities. Reasonable accommodation will be made so that qualified applicants with disabilities may participate in the application process. If you need any accommodations during the hiring process, please let us know when you submit your application and we'll do our very best to adjust as needed.\nFor Information regarding Data Privacy, please review https://privacy.drsquatch.com/. \n Unsolicited Resume Policy.Dr. Squatch (“DRSQ”) employs an internal Talent Acquisition department. Exceptionally, DRSQ may choose to supplement that internal team with support from temporary staffing agencies, placement services, and/or recruiting agencies (\"Agency\"). Agencies are hereby specifically directed NOT to contact DRSQ employees directly in an attempt to present candidates. DRSQ’s Talent Acquisition team is responsible for all candidate presentations to our hiring managers.\nTo protect the interests of all parties, Dr. Squatch will not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to DRSQ, including unsolicited resumes sent to a DRSQ email address or mailing address, directly to DRSQ employees, or to DRSQ’s resume database will be considered property of Dr. Squatch.\nDRSQ will not pay a placement, service or other fee for any placement resulting from the receipt of an unsolicited resume . This also includes partial resumes, LinkedIn profiles, general candidate profiles, and/or candidate details or information. DRSQ will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees.\nDRSQ’s Talent Acquisition team must provide advance written approval to an Agency to submit resumes and/or profiles for a specific job-opening, and the approval must be in conjunction with a valid fully executed staffing, placement or other service agreement. DRSQ will not pay a fee to any Agency that does not have a fully executed agreement in place prior to submission, receipt and placement of candidates.","description_format":"text","description_chars":9328,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Company events"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Personal Hygiene & Toiletries"],"lifecycle":[{"event":"open","at":"2026-09-25T19:01:02Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.9,"age_days":16,"expected_fill_days":33,"reasons":["conf:0","win:mid"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":false},"html_url":"https://alion.io/job/dr-squatch-associate-director-cybersecurity-privacy-it","json_url":"https://alion.io/job/dr-squatch-associate-director-cybersecurity-privacy-it.json","meta":{"generated_at":"2026-10-12T23:08:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37942,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673283},"rest":"https://alion.io/mcp/rest/get_company?id=673283"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdr-squatch-associate-director-cybersecurity-privacy-it"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdr-squatch-associate-director-cybersecurity-privacy-it"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdr-squatch-associate-director-cybersecurity-privacy-it"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dr-squatch-associate-director-cybersecurity-privacy-it\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdr-squatch-associate-director-cybersecurity-privacy-it"}]}