About the Role

Mailchimp is seeking an experienced and strategic Director of Security & Compliance to own and advance the company's security posture across all domains. This is a high-impact director-level role reporting directly to the Chief Technology Officer, with broad ownership over governance, risk, compliance, and technical security operations.

Our existing governance framework has served us well — we are now looking for a leader who will elevate our program to meet the demands of a rapidly evolving threat landscape, AI-driven product development, and increasing regulatory expectations. In the first 90 days, this individual will conduct a comprehensive posture assessment, align with key stakeholders across engineering, legal, and product, and present a multi-year security roadmap to executive leadership.

Key Responsibilities

• Own and continuously improve the company's end-to-end security and compliance posture, including network, application, cloud, and data security
• Lead the GRC function — maintain and mature frameworks including SOC 2 Type II, ISO 27001, GDPR, CCPA, and emerging AI governance standards such as ISO 42001
• Partner with the engineering and product teams to embed security into the software development lifecycle (SDLC) and AI product pipelines
• Direct the incident response program, including tabletop exercises, playbook development, and post-incident reviews
• Present security strategy, risk assessments, and compliance status to the executive leadership team and board of directors
• Build, mentor, and grow a high-performing security team; manage vendor relationships and third-party security assessments

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field; advanced degree preferred
• 8+ years of progressive information security experience, with a minimum of 3 years in a director-level or equivalent leadership role
• Demonstrated expertise across compliance frameworks including SOC 2, ISO 27001, NIST CSF, GDPR, and CCPA
• Hands-on experience leading security operations, vulnerability management, and enterprise risk programs at scale
• Proven ability to communicate complex security concepts to non-technical executive stakeholders and board-level audiences

Preferred Qualifications

• Active CISSP, CISM, or CCISO certification
• Hands-on experience with ISO 42001 (AI Management Systems) implementation or transition
• Background in SaaS, marketing technology, or high-growth B2B environments
• Experience operating in organizations undergoing security transformation or post-acquisition integration

Compensation & Benefits

• Highly competitive base salary ($175,000 – $275,000 annually, commensurate with experience)
• Performance-based annual bonus tied to individual and company objectives
• Equity compensation package (RSUs) with standard vesting schedule
• Comprehensive medical, dental, and vision coverage for employee and dependents
• 401(k) with company match; flexible hybrid work arrangement (Atlanta, GA preferred)
• Generous PTO policy, 15 company holidays, and a dedicated professional development stipend

About Mailchimp

Mailchimp is the world's leading email marketing and automation platform, trusted by over 13 million businesses to grow their audience and drive revenue. Founded in Atlanta, GA in 2001, Mailchimp has grown from a small startup into a global technology company and is now part of the Intuit family of brands.

Headquartered in Atlanta with offices in Brooklyn, Santa Monica, and London, Mailchimp serves businesses across 175 countries. Our culture is rooted in curiosity, inclusion, and a commitment to building products that make a real difference for entrepreneurs worldwide. We are proud of the governance and security foundation we have built — and equally committed to evolving it for the challenges ahead.