CISO

About Glean:
Glean is the Work AI platform that helps everyone work smarter with AI. What began as the industry’s most advanced enterprise search has evolved into a full-scale Work AI ecosystem, powering intelligent Search, an AI Assistant, and scalable AI agents on one secure, open platform. With over 100 enterprise SaaS connectors, flexible LLM choice, and robust APIs, Glean gives organizations the infrastructure to govern, scale, and customize AI across their entire business - without vendor lock-in or costly implementation cycles.
At its core, Glean is redefining how enterprises find, use, and act on knowledge. Its Enterprise Graph and Personal Knowledge Graph map the relationships between people, content, and activity, delivering deeply personalized, context-aware responses for every employee. This foundation powers Glean’s agentic capabilities - AI agents that automate real work across teams by accessing the industry’s broadest range of data: enterprise and world, structured and unstructured, historical and real-time. The result: measurable business impact through faster onboarding, hours of productivity gained each week, and smarter, safer decisions at every level.
Recognized by Fast Company as one of the World’s Most Innovative Companies (Top 10, 2025), by CNBC’s Disruptor 50, Bloomberg’s AI Startups to Watch (2026), Forbes AI 50, and Gartner’s Tech Innovators in Agentic AI, Glean continues to accelerate its global impact. With customers across 50+ industries and 1,000+ employees in more than 25 countries, we’re helping the world’s largest organizations make every employee AI-fluent, and turning the superintelligent enterprise from concept into reality.
If you’re excited to shape how the world works, you’ll help build systems used daily across Microsoft Teams, Zoom, ServiceNow, Zendesk, GitHub, and many more. You'll be deeply embedded where people get things done. You'll ship agentic capabilities on an open, extensible stack, with the craft and care required for enterprise trust, as we bring Work AI to every employee, in every company.
About the Role
Glean is seeking a Chief Information Security Officer (CISO) to lead security for Glean as a company and for our core product. Reporting to the CTO, you will set the strategy and operating model across product and platform security, corporate security, detection and response, risk, and compliance, turning that strategy into measurable risk reduction.
This is an executive role for a leader who combines technical judgment with strong organizational leadership. You will partner closely with Engineering, Product, Legal, IT, and company leadership to make sound security decisions at the pace of an AI company. You should be able to go deep on architecture and incidents, build a durable program, and communicate clearly about risk and trade-offs.
You will
Set a risk-based security strategy, priorities, policies, metrics, and decision-making mechanisms that scale with Glean’s business. Give executives a clear view of material risks, remediation progress, and decisions that require business ownership, with a clear operating cadence to ensure risks are visible, owned, prioritized, and reduced.
Partner with Engineering and Product to build security into architecture, design, development, release, and operations. Guide security across application and platform layers, identity and authorization, customer-data flows, cloud environments, integrations, and AI-enabled capabilities, including models, agents, and the tools and data they can access.
Lead a measurable vulnerability-management and secure-development program spanning threat modeling, code and dependency risk, software supply-chain security, penetration testing, bug bounty, remediation ownership, and validation. Use automation and AI-assisted analysis thoughtfully to increase coverage and shorten time to fix.
Oversee security for corporate systems, identity, endpoints, SaaS applications, cloud infrastructure, and privileged access. Partner with IT and technical owners to improve preventive controls, monitoring, and operational resilience.
Ensure the organization can detect, assess, contain, recover from, and learn from security incidents. Clarify escalation and decision paths; coordinate with Engineering, Legal, Privacy, Communications, and business leaders; and ensure corrective actions are completed and validated.
Own security risk management, compliance strategy, audit readiness, and control effectiveness. Support frameworks and customer or regulatory requirements relevant to Glean’s business, which may include SOC 2, ISO 27001, HIPAA, PCI, and FedRAMP. Track meaningful outcomes in risk reduction, vulnerability remediation, incident readiness, and control effectiveness.
Build and grow a high-performing team across security engineering, enterprise security, detection and response, and governance. Set clear ownership, develop technical and people leaders, and create an environment where teams can execute with focus and accountability.
Build strong working relationships across the company, helping teams understand practical safeguards and make informed risk decisions without unnecessary friction. Partner with customer-facing security leaders on escalations and assurance needs. Contribute security expertise to commercial security products in partnership with their Product and business owners; those teams retain ownership of their product roadmaps.
About you
Senior security leadership experience with accountability for a broad, enterprise-scale security program at a high-growth technology or product company. Experience as a CISO, deputy CISO, or senior security executive is strongly preferred.
Strong technical depth across product and application security, cloud and infrastructure security, identity and access management, secure development, and vulnerability management. You can engage credibly with senior engineers on architecture and remediation choices.
Experience building and operating effective security, detection, and incident-response programs, including leading through high-severity incidents and ensuring lessons result in durable improvements.
Practical expertise in security risk management, governance, compliance, and audit readiness, with the judgment to distinguish control completion from actual risk reduction.
A track record of partnering with Product and Engineering to ship secure products and embed security in fast-moving development organizations.
Experience building, leading, and retaining strong multidisciplinary teams; setting priorities; allocating resources; and creating clear accountability across teams.
Excellent executive communication and judgment. You can explain technical issues and uncertainty plainly, recommend a path forward, and escalate material risk at the right time. You bring a collaborative, pragmatic leadership style that earns trust while holding a high bar for security outcomes.
Especially valuable: Experience securing enterprise AI, machine-learning, LLM, or agentic systems, including data handling, model and application boundaries, tool access, and adversarial testing; using automation or AI-enabled techniques to improve security analysis, detection, investigation, or remediation; supporting regulated customers or programs such as FedRAMP; or preparing a company for public-company or IPO-level governance and disclosure expectations.
Location
This role is hybrid (4 days a week in our San Francisco Bay Area office).
Compensation & Benefits