Director of Security - Berlin, Deutschland - Vestiaire Collective

Beschreibung

Vestiaire Collective is the leading global online marketplace for desirable pre-loved fashion.

Our mission is to transform the fashion industry for a more sustainable future by empowering our community to promote the circular fashion movement.

Vestiaire was founded in 2009 and is headquartered in Paris with offices in London, Berlin, New York, Singapore and Hong Kong and warehouses in Tourcoing (France), Crawley (UK), Hong Kong and New York.

We currently have a diverse global team of 800 employees representing over 50 nationalities. Our values are community, activism, transparency, dedication and greatness. We are proud to be a BCorp.


Vestiaire Collective is hiring a Director of Security based in Paris, Berlin or Lisbon.

About the role

• Responsible to define and deliver Vestiaire's information security roadmap
• Define clear KPIs for the security area and frequently report on progress and maturity
• Conduct regular risk assessments, vulnerability scans, and penetration tests to identify and address potential security weaknesses.
• Manage our bug bounty program
• Stay uptodate with emerging threats, vulnerabilities, and industry trends, and provide recommendations for mitigating risks.
• Collaborate with development teams to integrate security practices into the software development life cycle (SDLC).Establish incident response and disaster recovery plans, and lead the response to security incidents.
• Develop and implement Business Continuity plans
• Ensure compliance with relevant industry standards and regulations (e.g., GDPR, DSA, HIPAA, ISO working towards a certification in the near future.
• Develop and maintain security policies, procedures, and guidelines to align with industry best practices.
• Work closely with legal and privacy teams to address security and privacy requirements.
• Design and deliver comprehensive security awareness and training programs to educate employees on security risks, policies, and best practices.
• Monitor and measure the effectiveness of security awareness initiatives and adjust strategies as needed.
• Foster a securityconscious culture throughout the organisation by promoting security awareness and accountability.
• Build and manage a highly efficient team of 56 direct reports. Hire, grow and retain top talents.

Who you are

• Proven experience (8+ years) in a senior security leadership role, preferably in a fastpaced startup/scaleup environment.

- +5 years of team
- and people management experience

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field. Relevant certifications (e.g., CISSP, CISM, CCSP, AWS Cloud Security) are highly desirable.
• Experience in automating security aspects as part of the SDLC.
• Deep understanding of compliance frameworks and regulations, with the ability to translate requirements into practical policies and procedures (e.g. ISO 27001, PCI DSS, SOC2, GDPR, DSA).
• Experience in designing and delivering effective security awareness and training programs.
• Excellent leadership and communication skills, with the ability to collaborate effectively with technical and nontechnical stakeholders.
• Strong analytical and problemsolving abilities, with a proactive and solutionoriented mindset.
• Familiarity with agile development methodologies and DevSecOps practices.
• Ability to adapt to a rapidly changing environment and manage multiple priorities.
• Handson, can do and pragmatic attitude with the desire to deliver results

What we offer

• A meaningful job with an impact on the way people consume fashion and promote sustainability
• Flexible work possibilities
• The opportunity to do careerdefining work in a fastgrowing Frenchborn scale up
• The possibility to work as part of a globally diverse team with more than 50 nationalities
• Two days to help Project reinforcing your activist journey and volunteer for an association
• Significant investment in your learning and growth
• Competitive compensation and benefits package
• As full member of our entrepreneurial project, you will be eligible to free shares

**Vestiaire Collective is an equal opportunities employer