Lead, System Security

ABOUT SLATE

At Slate, we’re building safe, reliable vehicles that people can afford, personalize and love—and doing it here in the USA as part of our commitment to reindustrialization. The spirit of DIY and customization runs throughout every element of a Slate, because people should have control over how their trucks look, feel, and represent them.

WHO WE ARE LOOKING FOR We are hiring a Director of Cybersecurity to own security and security compliance across all of Slate. This is a company-wide program, not a corporate IT function. You will set the strategy, roadmap, and standards that protect our people, our data, our factory, our customers, and the truck itself, and you will build the team and partnerships to carry it out.

You will work across every part of the business: corporate IT, software engineering, enterprise systems, manufacturing systems, data, vehicle engineering, legal, finance, and our external partners. The job is to make security a capability that helps Slate ship faster and with confidence, not a gate that slows it down.

You will inherit early foundations, including a team, a NIST CSF 2.0 self-assessment, a managed detection and response plan, and baseline security policies, and turn them into a mature, measurable program that holds up to auditors, regulators, partners, and the board.

WHAT YOU GET TO DO

• Security strategy and governance.  Define Slate's cybersecurity strategy, multi-year roadmap, and risk-based priorities. Own the security policy framework, risk register, and governance model. Report on security posture and risk to the CTO, executive team, and board in clear business terms, and own the security budget.
• Compliance and regulatory readiness.  Lead Slate toward the frameworks and obligations our business will require, sequenced to match our growth: SOX IT general controls in partnership with Finance and internal audit, NIST CSF 2.0 maturity, ISO 27001 certification, PCI-DSS for payments, CCPA and state privacy laws, NIST 800-171 and CMMC for government and defense-adjacent work, and export control obligations. Own audit readiness, evidence collection, and remediation tracking.
• Team and culture.  Recruit, lead, and develop a security team, deciding where to build in-house expertise and where to rely on partners. Run security awareness and training that people remember, and build a culture where teams bring security problems forward early.
• Vehicle and product cybersecurity.  Partner with vehicle engineering and connected vehicle teams to stand up a Cybersecurity Management System aligned to ISO/SAE 21434 and UN R155/R156, including threat analysis and risk assessment (TARA), secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements. Establish a product security incident response function and a coordinated vulnerability disclosure program and represent Slate in industry groups such as Auto-ISAC.