at Slate
ABOUT SLATE
At Slate , we’re building safe, reliable vehicles that people can afford, personalize and love—and doing it here in the USA as part of our commitment to reindustrialization. The spirit of DIY and customization runs throughout every element of a Slate , because people should have control over how their trucks look, feel, and represent them.
WHO WE ARE LOOKING FOR
We are hiring a Director of Cybersecurity to own security and security compliance across all of Slate . This is a company-wide program, not a corporate IT function. You will set the strategy, roadmap, and standards that protect our people, our data, our factory, our customers, and the truck itself, and you will build the team and partnerships to carry it out.
You will work across every part of the business: corporate IT, software engineering, enterprise systems, manufacturing systems, data, vehicle engineering, legal, finance, and our external partners. The job is to make security a capability that helps Slate ship faster and with confidence, not a gate that slows it down.
You will inherit early foundations, including a team, a NIST CSF 2.0 self-assessment, a managed detection and response plan, and baseline security policies, and turn them into a mature, measurable program that holds up to auditors, regulators, partners, and the board.
WHAT YOU GET TO DO
Security strategy and governance. Define Slate 's cybersecurity strategy, multi-year roadmap, and risk-based priorities. Own the security policy framework, risk register, and governance model. Report on security posture and risk to the CTO, executive team, and board in clear business terms, and own the security budget.
Compliance and regulatory readiness. Lead Slate toward the frameworks and obligations our business will require, sequenced to match our growth: SOX IT general controls in partnership with Finance and internal audit, NIST CSF 2.0 maturity, ISO 27001 certification, PCI-DSS for payments, CCPA and state privacy laws, NIST 800-171 and CMMC for government and defense-adjacent work, and export control obligations. Own audit readiness, evidence collection, and remediation tracking.
Team and culture. Recruit, lead, and develop a security team, deciding where to build in-house expertise and where to rely on partners. Run security awareness and training that people remember, and build a culture where teams bring security problems forward early.
Vehicle and product cybersecurity. Partner with vehicle engineering and connected vehicle teams to stand up a Cybersecurity Management System aligned to ISO/SAE 21434 and UN R155/R156, including threat analysis and risk assessment (TARA), secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements. Establish a product security incident response function and a coordinated vulnerability disclosure program and represent Slate in industry groups such as Auto-ISAC.
Application and cloud security. Work with Software Engineering and DevOps to embed security into the SDLC across our consumer website, ecommerce platform, mobile app, B2B integrations, and internal applications. Set standards for threat modeling, secure code review, SAST/DAST, dependency and secrets management, and cloud security posture across AWS, Azure, and edge platforms. Drive penetration testing and remediation prioritization.
Enterprise systems security. Partner with Enterprise Systems to secure ERP (SAP S/4HANA), WMS, procurement, warranty, and other business platforms. Own role design standards, segregation of duties, privileged access, and access reviews that satisfy SOX and keep financial and operational data trustworthy.
Manufacturing and OT security. Partner with Manufacturing Systems, Controls, and IT Operations to secure the plant floor at Warsaw and future sites. Establish an OT security program aligned to IEC 62443, including network segmentation across ISA-95 levels, asset inventory, secure rem