Dropbox is seeking a visionary and pragmatic Vice President, Head of Security to lead our global security organization. This executive role is responsible for both long-term security strategy and near-term initiatives that reduce risk, safeguard customer data, and preserve trust at scale.You will lead a multidisciplinary team of security engineers and specialists, and partner deeply across Dropbox’s leadership, including Engineering, Product, Design, Legal, and Compliance. Your mission is to embed security into every layer of our company—from product architecture to infrastructure operations—and ensure Dropbox remains resilient in the face of evolving threats.
As a member of the technology leadership team reporting directly to the CTO, you’ll bring a balance of technical depth, operational rigor, and executive presence. You’ll be a critical voice in company-wide decision-making, representing security at the highest levels of the business. Security is foundational to Dropbox’s mission of designing a more enlightened way of working. As our VP, Head of Security, you’ll be at the helm of a trusted, mission-critical function, enabling innovation while protecting the people and data that power our business. This is a rare opportunity to influence the direction of a global company and shape the security posture of the future of work.
Responsibilities- Define and champion a long-term vision for security across Dropbox, driving the evolution of our security strategy in alignment with risk reduction, business priorities, and emerging threats.
- Establish strategic security objectives and measure progress through meaningful KPIs and risk-reduction outcomes.
- Act as a security thought leader internally and externally, representing Dropbox with customers, regulators, and the Board of Directors.
- Lead, mentor, and scale a world-class security team across multiple domains including product security, infrastructure security, threat detection and response, and governance.
- Cultivate a high-performance, inclusive, and resilient team culture grounded in continuous learning and operational excellence.
- Shape organizational design and hiring to support evolving business and risk needs.
- Oversee end-to-end security operations, including threat detection and response, incident management, and vulnerability management.
- Ensure Dropbox maintains readiness for security events and is capable of a coordinated, transparent response to any incidents.
- Drive secure-by-design practices into our engineering workflows, tooling, and platform architecture.
- Work closely with Engineering, Product, and Design to embed security into every stage of the product lifecycle.
- Collaborate with Legal, Privacy, and Compliance teams to meet global regulatory requirements and maintain key certifications (e.g., SOC 2, ISO 27001, FedRAMP).
- Translate complex security concepts and risks for a variety of audiences—from engineers to executive leadership to the Board.
- 15+ years of experience in security or infrastructure roles, including 5+ years leading security at the executive level in cloud-native or high-scale technology environments.
- Proven track record building and leading high-impact security programs and organizations.
- Deep expertise across modern cloud security architecture, secure software development, identity and access management, and incident response.
- Exceptional communication and executive influencing skills; comfortable navigating both technical and non-technical conversations at the highest levels of the company.
- Demonstrated success in aligning security with business strategy and shipping secure, scalable products.
- Experience operating at global scale in a SaaS, infrastructure, or platform company.
- Prior experience interfacing directly with Boards, regulators, and enterprise customers.
- Familiarity with zero trust architecture, data protection frameworks, and evolving regulatory environments.
- Recognized contributions to the security community (e.g., open source, speaking, research).
