Director, Tech Infrastructure Security

Carvana

Regional Senior Manager, Post Production/Inventory Quality and Readiness Position Overview: As the Regional Senior Manager of Post Production/IQR, you will have the unique opportunity to partner closely with several different teams at multiple sites (including IC leadership, reconditioning, and support teams) to drive the strategy behind the development and deployment of Post Production & Quality programs, as well as manage continued performance of internal and external vendors. We are looking for a resourceful self-starter who will set the tone for the successful and fast-paced growth of our Inspection Centers. The Regional Senior Manager of Post Production/IQR role will be heavily focused on leading our teams to effectively close operational gaps and establishing standardized practices that will drive exceptional quality.  What you’ll be doing: * Driving successful execution amongst our Post Production teams by effectively leading and developing team members and creating and implementing new processes and systems. * Identifying issues or roadblocks to execution and quickly taking action to problem solve and implement effective solutions across a large and quickly evolving platform. * Providing clear direction and necessary support to ensure operational gaps are being closed in a timely manner.  * Working with key business partners to develop systems, metrics, reporting, and staffing models for our Post Production processes and teams.  * Effectively leading and developing onsite personnel at third-party production  locations.  * Managing quality of internal and external vendors responsible for producing units for Carvana.  * Establishing effective working relationships with internal and external partners.  * Creating and successfully executing large-scale change management initiatives and new process rollouts.  * Other duties as assigned.  What the job requires: To be able to do your job at Carvana, there are some basic requirements we want to share with you. * Minimum of 8 years of leadership, people development, and operations experience  * Experience working in a Lean Manufacturing environment  * Experience developing effective and scalable operating systems and processes * Proven track record of production process improvement and innovation * Proven track record of managing complex change across large teams * Proven track record of leading and developing others  * Proven ability to obtain project deliverables and company metrics  * Strong analytical thinking and organizational skills  * Strong written and verbal communication skills; Ability to learn quickly and transfer knowledge * Requires standing for extended periods of time with frequent stretching, reaching, walking, stooping, pushing, and/or pulling in an environment that may be cold, hot, noisy, and wet and may have fumes or odors due to vehicle maintenance * Ability to maintain high volume and high-quality content in a fast-paced environment. * Ability to travel up to 80% (multi site responsibility) * Ability to provide valuable and actionable feedback * Proficient computer skills * Must be at least 18 years of age * Valid driver’s license with a clean driving record (no DUIs and no more than two moving violations in the last 3 years). * Ability to read, write, speak and understand English This job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.   Legal stuff Hiring is contingent on passing a complete background check. This role is not eligible for visa sponsorship. Carvana is an equal employment opportunity employer. All applicants receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, marital status, national origin, age, mental or physical disability, protected veteran status, or genetic information, or any other basis protected by applicable law. Carvana also prohibits harassment of applicants or employees based on any of these protected categories.   Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Databricks

P-1016 At Databricks, we are passionate about helping data teams solve the world's toughest problems — from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. To achieve our mission, we strive to radically simplify the experience of our users as they undertake complex data management projects, while ensuring that we protect their data with the highest standards of security. In this role, you will lead all aspects of data security for the Databricks Lakehouse platform. You will drive the product strategy to identify, prioritize and deliver both the external and internal controls necessary for customers to meet their privacy, confidentiality, digital sovereignty and other regulatory obligations. You will create elegant yet simple policy models that enable customers to control access to their most important assets. Your work will help IT and security administrators feel at ease with increasing Databricks usage in their organization. Our data champions will benefit from the data security and operational simplicity you provide, to ensure that they can focus their time on creating most value for their users. You will report to a Senior Director of Product management. The impact you will have: * Make security a market differentiator that enables Databricks to succeed in enterprise and regulated industries. * Help Databricks gain the trust of CSO teams of security sensitive customers and qualify the Lakehouse platform for all data classes in the customer organization. * Build a vision for a best-in-class network and data security policy model that provides secure access to customer workloads and data while minimizing exposure to unauthorized access and risk of data loss. * Partner with privacy, legal, and security teams to deliver anonymization, retention, and residency for regulated data and sensitive assets such as AI models. * Deepen our understanding of evolving threats and corresponding technologies in data security. Use customer inputs to serve as an expert and propose new innovations or best practices from the industry. * Partner with cloud providers and support confidential compute * Rationalize and refine the differences in customer experience and data security technologies across multiple clouds including Azure, AWS and Google Cloud. What we look for: * 7+ years of product management experience with enterprise B2B or SaaS products, with experience delivering successful customer-facing products/features. * Domain expertise in data security, data privacy, and encryption * An accomplished senior product manager who can define and deliver on success metrics, summarize customer inputs into actionable requirements, and crisply communicate product value propositions to customers and sales teams. * Experience partnering with senior engineering leadership with an ability to deep-dive into complex technical concepts. * Experience driving business results through influential leadership across multiple partner teams including engineering, sales, marketing, solution architects and customer success. * Passion for designing products that simplify user experience of technically complex products.     Pay Range Transparency Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles.  Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.   Local Pay Range $129,000—$228,000 USD About Databricks Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook. Benefits At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here. Our Commitment to Diversity and Inclusion At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics. Compliance If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

Taskrabbit

ABOUT TASKRABBIT: Taskrabbit is a marketplace platform that conveniently connects people with Taskers to handle everyday home to-do’s, such as furniture assembly, handyman work, moving help, and much more. At Taskrabbit, we want to transform lives one task at a time. As a company we celebrate innovation, inclusion and hard work. Our culture is collaborative, pragmatic, and fast-paced. We’re looking for talented, entrepreneurially minded and data-driven people who also have a passion for helping people do what they love. Together with IKEA, we’re creating more opportunities for people to earn a consistent, meaningful income on their own terms by building lasting relationships with clients in communities around the world. Taskrabbit is a hybrid company with employees distributed across the US and EU and a Built In — Best Places to Work (2022, 2023, 2024, 2025) continually ranked across multiple national and regional categories. Join us at Taskrabbit, where your work will be meaningful, your ideas valued, and your potential unleashed! ABOUT THE ROLE Taskrabbit is maturing its engineering organization toward a scalable, secure, and compliant environment, anchored on three programs: Oncall Modernization, Cloud Infrastructure Modernization, and CIS IG1 compliance. Today, the operational "process tail" of these programs—audit evidence gathering, cross-departmental coordination, policy rollout, vulnerability SLA enforcement, and periodic reviews, is absorbed by our most senior technical talent. This is our first dedicated Infrastructure & Security TPM. This role owns the program layer so our ICs and Engineering Managers can refocus on implementation, advisory, review, and architecture. You will drive CIS IG1 to sustained compliance, lead its expansion from engineering to the entire company, and build the foundation for IG2 and IG3. You will be the "air traffic controller" for security and infrastructure requests. This is a high-visibility, foundational role with a direct mandate to build durable processes from the ground up. You will report to the Director of TPM and partner daily with our infrastructure and security leadership. WHAT YOU'LL DO Compliance & Security Program Ownership * Own the end-to-end CIS IG1 program: intake, evidence collection, SLA enforcement, and periodic review cycles across all 18 control families * Expand CIS controls from local engineering teams to the entire company, and build the roadmap for IG2 and IG3 * Maintain the CIS Crosswalk Tracker as a living record of audit readiness and control status * Translate technical controls into actionable Jira workflows and enforceable remediation SLAs * Manage the annual external Penetration Test program and track remediation of findings to closure Governance & Intake * Design and operate a centralized intake process for security and infrastructure requests, ensuring engineers work only on vetted, prioritized work * Standardize access-granting workflows for new hires, role changes, and tool requests—with full audit trails * Establish and enforce SLAs for vulnerability remediation, PR reviews, and ticket response; report compliance to leadership Stakeholder & Cross-Functional Orchestration * Serve as the primary interface between Engineering, Security, Legal, Finance, IT, and Procurement for security-related programs, vendor reviews, and audits * Negotiate infrastructure and security work into team sprints; manage GIVE/GET dependency tracking with Engineering Directors * Drive policy approvals and company-wide rollouts (e.g., Data Management, Secure Configuration, Access Control) from draft to operationalized and signed-off Operational Excellence (Run the Business) * Operationalize recurring compliance work: quarterly access reviews, monthly vulnerability triage, bi-annual asset inventory updates, annual vendor reassessments, and tabletop BCP exercises * Build and maintain dashboards and automated evidence pipelines to reduce manual compliance chores * Report security posture, key metrics, and a "Security Score" to senior leadership in clear, business-readable terms * Lead the BCP program: standardize templates, schedule tabletop exercises, document results, and drive remediation into engineering sprints Incident & Vulnerability Program Management * Scale vulnerability management from local triage to a company-wide SLA-driven program using Wiz, HackerOne, and Jira * Own the SLA—chasing teams to close critical findings within 7 days and reporting Days-to-Patch to leadership * Manage the phishing response playbook and incident post-mortem process; ensure P0/P1 action items land in sprint WHO YOU'LL WORK WITH * Engineering Director, Infrastructure & Security * Senior Manager, Cloud Infrastructure * Security Manager  * Infosec/Security team ICs * Other TPM’s * Engineering Managers and ICs across Cloud Infrastructure and SRE * Legal (data retention, SOC2/vendor reviews), Finance (security budget), IT (endpoint and asset coverage, Okta), Procurement, and the Data Lead (PII inventory and retention) * Senior Engineering and Product leadership (risk and metrics reporting) WHAT WE'RE LOOKING FOR Required Experience * 3+ years of technical program management in an infrastructure, security, SRE, or compliance environment * Demonstrated ability to translate security controls (e.g., CIS, SOC2) into actionable Jira workflows, SLAs, and repeatable operational processes * Proven track record driving company-wide, cross-departmental initiatives through to completion—including securing stakeholder sign-offs and managing organizational resistance * Experience operationalizing run-the-business processes: access reviews, vulnerability remediation tracking, audit evidence collection, and periodic compliance reviews * Sufficient technical depth in cloud infrastructure, SRE, and infosec to coordinate credibly with engineers and translate findings for non-technical leaders * Strong executive communication skills—able to synthesize technical risk into a business-readable security score and status report * End-to-end program ownership: from intake governance and dependency tracking through leadership reporting Nice to Haves * Familiarity with CIS Controls v8.1 and the IG1/IG2/IG3 framework * Hands-on exposure to tools in our stack: Wiz, HackerOne, CrowdStrike, Datadog, Okta, JAMF, or KnowBe4 * Experience supporting SOC2 or PCI audits * Jira workflow and dashboard configuration experience * Background in GRC (Governance, Risk, and Compliance) or security program management * Experience working in an organization operating under a parent- or partner-company compliance context WHAT SUCCESS LOOKS LIKE * ICs and Engineering Managers have measurably less coordination toil—30-40% of their program overhead returned to implementation and advisory work * CIS IG1 sustained at or near 100% with automated evidence pipelines, expanded beyond engineering to all departments * Centralized intake and governance live; SLAs for vulnerability remediation and request response published and enforced * At least one full periodic review cycle (quarterly access review or monthly vulnerability triage) fully operationalized with documented evidence within 90 days * BCP program established and validated via tabletop exercise within the first year * Leadership receives a clear, consistent security score and metrics report; technical risk is legible to the SLT * A credible roadmap for CIS IG2/IG3 underway within one year Compensation & Benefits At Taskrabbit, our approach to compensation is designed to be competitive, transparent and equitable. Total compensation consists of base pay + annual bonus + benefits + perks. The base pay range for this position is $87,000 - $120,000. This range is representative of base pay only, and does not include any other total cash compensation amounts, such as company bonus or benefits. Final offer amounts may vary from the amounts listed above, and will be determined by factors including, but not limited to, relevant experience, qualifications, geography, and level. YOU’LL LOVE WORKING HERE BECAUSE: * Taskrabbit is a Hybrid Company. We value flexibility and choice but also stay committed to regular in-person connection. * The People. You will be surrounded by some of the most talented, supportive, smart, and kind leaders and teams -- people you can be proud to work with! * The Diverse Culture. We believe that we make better decisions when our workforce reflects the diversity of the communities in which we operate. Women make up half of our leadership team and our diversity representation is above that of the tech industry average. * The Perks. Taskrabbit offers our employees with employer-paid health insurance and a 401k match with immediate vesting for our US based employees. We offer all of our global employees generous and flexible time off with 2 company-wide closure weeks, Taskrabbit product stipends, wellness + productivity + education stipends, IKEA discounts, reproductive health support, and more. Benefits vary by country of employment.  TASKRABBIT’S COMMITMENT TO DIVERSITY AND INCLUSION: An Active Commitment to Equity within our Company and Platform. We are an inclusive community where all who share our mission and values belong. Our diverse team represents the communities we serve, breaking down systemic barriers, and transforming lives- one action at a time. Taskrabbit is an equal opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, ancestry, citizenship, sex, gender, gender identity, sexual orientation, age, marital status, military/veteran status, or disability status. Taskrabbit is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.  Taskrabbit will consider for employment all qualified applicants with criminal histories in a manner consistent with applicable law.