Head of Corporate Security

Island is shaping the future of work - creating an enterprise workspace for both knowledge workers and agents - where access, security, and AI-powered productivity are built in. Our enterprise agentic control plane boosts productivity across devices, browsers, applications, networks, and data while protecting sensitive information, simplifying access, and helping enterprises scale AI safely.

Behind all of that is a team of people who care deeply about their craft and want to do the biggest and best work of their careers. At Island, character and drive matter more than your resume.

Backed by Coatue Management, Insight Partners, Sequoia Capital, Cyberstarts, and other world-class investors, Island is used by millions of people at some of the planet’s largest enterprises.

As a Head of Corporate Security at Island, you will build and lead Island’s IT Security team, who owns the security of Island as a company, including devices, networks, data and AI usage. You will build the program, set the standards and make Island a reference for how a modern security company protects itself.

As part of your role you will be:

• Define Island's corporate security strategy and roadmap.
• Build and lead Island’s IT Security team.
• Secure every company endpoint with EDR, hardening and vulnerability management.
• Own identity and access: SSO, MFA, least privilege and access reviews.
• Secure corporate networks, cloud, email and collaboration tools.
• Lead company-level compliance and audits such as SOC 2 and ISO 27001.
• Build a security awareness program that measurably changes behavior.
• Set and enforce AI governance for the tools, assistants and agents our employees use.
• Run Island's own platform internally and feed real-world findings back to Product.

Requirements

• 6+ years of experience in IT security, with at least 3 years leading a corporate security program or team.
• 3+ years of hands-on experience in security operations and incident response.
• Hands-on experience in managing security solutions including endpoint security, identity, SaaS and network.
• Proficiency in scripting and automation; experience building or extending security automation workflows (Torq, Tines, SOAR, or similar).
• Strong grasp of attacker techniques, common detection evasion methods, and incident investigation methodology.
• Ability to work independently and drive initiatives end-to-end; comfortable in a fast-moving environment with shifting priorities.
• Experience in a fast-growing SaaS or security company.