{"id":2102955,"url":"https://alion.io/job/slate-auto-lead-system-security","title":"Lead, System Security","company":{"id":1772423,"name":"Slate Auto","domain":"slate.auto","url":"https://alion.io/company/slate-auto","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Sales","role_family":"Sales","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":144122,"max":240204,"currency":"USD","period":"year","gross":null,"usd_annual":240204},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-08T19:18:51Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-12T15:28:02Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"ABOUT SLATE\nAt Slate, we’re building safe, reliable vehicles that people can afford, personalize and love-and doing it here in the USA as part of our commitment to reindustrialization. The spirit of DIY and customization runs throughout every element of a Slate, because people should have control over how their trucks look, feel, and represent them.\nWHO WE ARE LOOKING FOR\nWe are hiring a Director of Cybersecurity to own security and security compliance across all of Slate. This is a company-wide program, not a corporate IT function. You will set the strategy, roadmap, and standards that protect our people, our data, our factory, our customers, and the truck itself, and you will build the team and partnerships to carry it out.\nYou will work across every part of the business: corporate IT, software engineering, enterprise systems, manufacturing systems, data, vehicle engineering, legal, finance, and our external partners. The job is to make security a capability that helps Slate ship faster and with confidence, not a gate that slows it down.\nYou will inherit early foundations, including a team, a NIST CSF 2.0 self-assessment, a managed detection and response plan, and baseline security policies, and turn them into a mature, measurable program that holds up to auditors, regulators, partners, and the board.\nWHAT YOU GET TO DO\nSecurity strategy and governance. Define Slate's cybersecurity strategy, multi-year roadmap, and risk-based priorities. Own the security policy framework, risk register, and governance model. Report on security posture and risk to the CTO, executive team, and board in clear business terms, and own the security budget.\nCompliance and regulatory readiness. Lead Slate toward the frameworks and obligations our business will require, sequenced to match our growth: SOX IT general controls in partnership with Finance and internal audit, NIST CSF 2.0 maturity, ISO 27001 certification, PCI-DSS for payments, CCPA and state privacy laws, NIST 800-171 and CMMC for government and defense-adjacent work, and export control obligations. Own audit readiness, evidence collection, and remediation tracking.\nTeam and culture. Recruit, lead, and develop a security team, deciding where to build in-house expertise and where to rely on partners. Run security awareness and training that people remember, and build a culture where teams bring security problems forward early.\nVehicle and product cybersecurity. Partner with vehicle engineering and connected vehicle teams to stand up a Cybersecurity Management System aligned to ISO/SAE 21434 and UN R155/R156, including threat analysis and risk assessment (TARA), secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements. Establish a product security incident response function and a coordinated vulnerability disclosure program and represent Slate in industry groups such as Auto-ISAC.\nApplication and cloud security. Work with Software Engineering and DevOps to embed security into the SDLC across our consumer website, ecommerce platform, mobile app, B2B integrations, and internal applications. Set standards for threat modeling, secure code review, SAST/DAST, dependency and secrets management, and cloud security posture across AWS, Azure, and edge platforms. Drive penetration testing and remediation prioritization.\nEnterprise systems security. Partner with Enterprise Systems to secure ERP (SAP S/4HANA), WMS, procurement, warranty, and other business platforms. Own role design standards, segregation of duties, privileged access, and access reviews that satisfy SOX and keep financial and operational data trustworthy.\nManufacturing and OT security. Partner with Manufacturing Systems, Controls, and IT Operations to secure the plant floor at Warsaw and future sites. Establish an OT security program aligned to IEC 62443, including network segmentation across ISA-95 levels, asset inventory, secure remote and vendor access, OT monitoring, and incident response plans that put safety and production uptime first. You understand that in a factory, a security control that stops the line is also an outage.\nCorporate and enterprise security. Own identity and access management strategy (workforce and federated customer and partner identity), endpoint and email security, vulnerability management, and security architecture for corporate infrastructure, working closely with IT Operations who run the underlying platforms and day to day.\nData security and privacy. Partner with the Data team and Legal to define data classification, retention, and protection standards across our data lake house, vehicle telemetry, customer data, and manufacturing data. Ensure privacy by design for consumer and connected vehicle data and set controls for safe use of AI and LLM tools across the company.\nSecurity operations and incident response. Own detection, response, and threat intelligence. Build and exercise the incident response plan across IT, cloud, OT, and vehicle scenarios, including crisis communications, legal coordination, and regulatory notification. Track and improve detection coverage and response times.\nThird-party and supply chain risk. Establish a vendor security risk program covering SaaS providers, MSPs, integration partners, component suppliers, and contract manufacturers, scaled to the risk each one carries.\nPartnerships\nThis role sits within the Technology organization and partners as a peer with the leaders of IT Infrastructure and Operations, Enterprise Systems, Manufacturing Systems, Software Engineering, DevOps, and Data. Outside of Technology, you will work closely with vehicle engineering, manufacturing, legal and compliance, finance and internal audit, supply chain, and customer care. Much of your impact will come through influence rather than authority, so trust, clarity, and pragmatism matter as much as technical depth.\nWHAT YOU BRING TO THE TEAM\n10 or more years in information security or cybersecurity, with at least 5 years leading security teams or programs.\nExperience building or substantially maturing a security program across multiple domains, not only a single function such as SOC, GRC, or AppSec.\nHands-on leadership of compliance efforts against recognized frameworks, including SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171. You have been through real audits and certifications.\nDirect experience securing manufacturing, industrial, or OT environments, or a strong working knowledge of IEC 62443, OT network segmentation, and the operational realities of a production floor.\nSolid technical grounding in cloud security (AWS preferred), identity and access management, application security, and security operations. Deep enough to evaluate architecture and challenge vendors, not only to manage people who do.\nA track record of translating risk into business terms and making pragmatic, prioritized tradeoffs in a fast-moving environment.\nStrong written and verbal communication, including presenting to executives and boards, and a low-ego, collaborative approach to working across departments.\nPreferred\nAutomotive, EV, or connected product security experience, including ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System.\nExperience standing up security for a greenfield plant, a new company, or a business going through rapid scale-up.\nConsumer ecommerce and payments security, including PCI-DSS scoping and consumer privacy regulations.\nExperience with CMMC, ITAR/EAR, or government and defense contracting requirements.\nFamiliarity with securing data platforms and AI/ML or LLM-based applications.\nIndustry certifications such as CISSP, CISM, GICSP, or CCSP.\nBachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.\nWork Authorization Requirement:\nApplicants must be authorized to work in the United States on a permanent basis. We are unable to offer visa sponsorship at this time.\nSALARY RANGE\nThe compensation for this position is the range Slate reasonably and in good faith expects to pay for the position taking into account the wide variety of factors that are considered in making compensation decisions, including job-related knowledge; skillset; experience, education and training; certifications; work location; and other relevant business and organizational factors.\n144,122.74 - 240,204.56 USD Annual Base Pay Range:\nADDITIONAL COMPENSATION AND BENEFITS\nSlate offers a wide range of competitive benefits, including medical, dental, vision, life insurance, disability insurance, vacation, and 401k. The successful candidate may also be eligible to participate in the equity program and/or a discretionary annual incentive program, subject to the rules governing such programs.\nWHY JOIN TEAM SLATE?\nAt Slate, we’re fueled by grit, determination, and attention to detail. The start-up spirit of ingenuity and resourcefulness move our business forward. Team Slate fosters a culture of excellence, innovation, and mutual respect, and is motivated by shared principles.\nSafety First\n\nDelight Customers\n\nOne Team\n\nRelentless Improvement\n\nFast, Frugal, and Scrappy\n\nRespectful Collaboration\n\nPositive Legacy\n\nWE WANT TO WORK WITH PEOPLE THAT REFLECT THE COMMUNITIES IN WHICH WE OPERATE.\nSlate is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, marital status, parental status, cultural background, organizational level, work styles, tenure and life experiences. Or for any other reason.\nSlate is committed to providing reasonable accommodation for qualified individuals with disabilities in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at\n.","description_format":"text","description_chars":10006,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-08T19:18:51Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":18,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":240204,"is_top_pay":true},"html_url":"https://alion.io/job/slate-auto-lead-system-security","json_url":"https://alion.io/job/slate-auto-lead-system-security.json","meta":{"generated_at":"2026-10-12T23:03:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37849,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1772423},"rest":"https://alion.io/mcp/rest/get_company?id=1772423"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fslate-auto-lead-system-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fslate-auto-lead-system-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fslate-auto-lead-system-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/slate-auto-lead-system-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fslate-auto-lead-system-security"}]}