Director of Enterprise Security

The posting, as Apptronik wrote it

Apptronik is a human-centered robotics company developing AI-powered robots to support humanity in every facet of life. Our flagship humanoid robot, Apollo, is built to collaborate thoughtfully with people, starting with critical industries such as manufacturing and logistics, with future applications in healthcare, the home, and beyond.

We operate at the cutting edge of Applied AI, applying our expertise across the full robotics stack to solve some of society's most important problems. You will join a team dedicated to bringing Apollo to market at scale, tackling the complex challenges like safety, commercialization, and mass production to change the world for the better.

JOB SUMMARY

As Apptronik scales its humanoid robotics business, we are seeking a Director of Enterprise Security to build and lead our enterprise information security program. Reporting to the Director of IT, the CISO will own Apptronik's risk management and governance frameworks and drive the company toward ISO 27001 certification. This role is focused on enterprise security protecting corporate systems, data, identities, and SaaS estate. The successful candidate is a pragmatic security professional who can translate framework requirements into clear policy and well-prioritized controls, stand up an ISMS quickly, and partner effectively with IT, legal, HR, finance, and operations leaders.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Define and own Apptronik's enterprise information security strategy, roadmap, and policies, with clear executive-level reporting on risk posture, program maturity, and key initiatives
• Design, implement, and operate an ISO 27001-aligned Information Security Management System (ISMS) — including scoping, Statement of Applicability, risk treatment plans, and the full set of Annex A controls — and drive Apptronik to ISO 27001 certification
• Own information security risk management — establish the information security risk register, risk assessment methodology, risk acceptance and treatment processes, and recurring reporting to executive leadership
• Build and run the security governance program — policies, standards, control ownership, exception handling, internal audit, control testing, and management review cadence
• Operate the SOC 2 program in parallel with ISO 27001, mapping shared controls, owning evidence collection, and managing relationships with external auditors and assessors
• Establish the enterprise security architecture across cloud for corporate workloads, SaaS estate, and corporate endpoints
• Build and run vulnerability management, threat detection and response, and incident response capabilities for enterprise systems — selecting and operating EDR, SIEM, DLP, and email security tooling; defining playbooks; and leading tabletop exercises
• Own identity and access management governance in partnership with IT — enforcing least-privilege, SSO, MFA, conditional access, SCIM provisioning, privileged access management, and per

[…]
e ability to build trust quickly across IT, legal, HR, finance, and operations

NICE TO HAVE

• Industry certifications such as CISSP, CISM, CISA, CCSP, ISO 27001 Lead Implementer or Lead Auditor
• Experience leading enterprise security at a hardware, robotics, manufacturing, automotive, or aerospace company
• Experience with GRC platforms (e.g., Vanta, Drata, OneTrust, ServiceNow GRC) to operationalize ISMS evidence and control monitoring
• Experience with additional frameworks such as NIST CSF audits, HITRUST, PCI-DSS, or TISAX
• Experience operating in environments subject to ITAR/EAR export controls or working with U.S. government / defense customers
• Prior experience scaling a security and GRC team from individual contributor to multi-discipline organization

EDUCATION and/or EXPERIENCE

• 12+ years of information security experience required, with substantial time in security leadership roles; Bachelor's degree in Computer Science, Information Security, Engineering, or a related field preferred — equivalent experience accepted
• Master's degree (e.g., MS in Information Security, MBA with security focus) is a plus
• Active senior security certifications (CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, GIAC) strongly preferred

PHYSICAL REQUIREMENTS

• Prolonged periods of sitting at a desk and working on a computer
• Periodic travel between Apptronik sites, customer locations, and industry events
• Vision to read printed materials and a computer screen
• Hearing and speech to communicate

*This is a direct hire. Please, no outside Agency solicitations.

Apptronik provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.