Director, Infrastructure & Information Security

Ruggable is a leading direct-to-consumer e-commerce brand based in Los Angeles, California with an extraordinary track record of high, profitable growth. We pride ourselves on having an extremely loyal customer base and a talented team made up of genuinely caring people who take action and deliver results. We are venture-backed and own a patented washable rug design that's disrupting the home décor industry. Our mission is to empower our customers to live vibrantly with beautiful products that don't compromise on function. If you're passionate about consumer products, e-commerce, and high-growth start-ups, keep reading!

Ruggable is looking for a Director of Infrastructure & Information Security. Technology is central to everything we do. The Technology team enables the infrastructure that powers our direct-to-consumer and wholesale business across three continents, eleven countries, and seven manufacturing plants, while supporting globally distributed teams.

This role owns the strategy, design, and operations of Ruggable's infrastructure and information security domains — spanning both on-premises and cloud environments. As Ruggable scales, this role is central to maturing how we plan, prioritize, and deliver infrastructure and security capabilities: building the roadmaps, standards, and operating rhythms that let the business move with the same speed and confidence as a larger enterprise.

Domains of ownership include developer enablement and internal tooling, observability, physical infrastructure, networking, identity and access management, cybersecurity, and the interoperability of plant and manufacturing systems with enterprise technology. This role deeply understands the impact of infrastructure on digital business as well as manufacturing and fulfillment, and can represent these domains in executive-level strategy and planning conversations.

• →Own the strategy, roadmap, and operating model for infrastructure and information security — including physical infrastructure, networking, identity and access management, cybersecurity, and plant system interoperability
• →Lead the evolution of infrastructure and security operations from reactive, ticket-driven support toward a planful, product and service -oriented model — with clear roadmaps, capacity planning, SLAs/SLOs, and governance that scale with the business
• →Develop and implement information security standards, governance, and risk management practices, including identity, asset, and access management policies and operations
• →Partner with manufacturing and plant engineering stakeholders to define standards for plant system interoperability and the convergence of operational technology (OT) and information technology (IT)
• →Identify, validate, and report on legal, regulatory, infrastructure, and cybersecurity risk while continuing to enable speed to value
• →Lead the design and implementation of large infrastructure initiatives supporting continued growth and broader strategic priorities
• →Manage vendor relationships, ensuring the best services at the best pricing across cloud, hardware, and managed service providers
• →Identify opportunities to automate and innovate across infrastructure and security operations
• →Own CapEx and OpEx budget planning and management for infrastructure and security domains
• →Build, lead, and develop a team capable of supporting the above, including career growth and succession planning
• →Be accountable for the day-to-day operations and reliability of infrastructure, and represent these domains in executive- and senior-leadership-level reporting and planning

• Experience managing an infrastructure organization — including design, implementation, and operations — inclusive of network, storage, compute, cloud, and on-prem
• Experience building and implementing standards and procedures across an enterprise, then governing and reporting on those standards
• Demonstrated ability leading a team through a shift from reactive execution to a planful, roadmap-driven operating model
• Experience spanning multiple infrastructure and security domains (e.g., networking, identity, observability) rather than a single specialty
• Presenting to executives and senior management, and influencing peers across functions
• Managing business stakeholders on large, cross-functional initiatives
• Demonstrated ability evolving infrastructure to support technology innovation, including developer enablement or platform engineering practices
• Experience with network design for a small to mid-sized global enterprise
• Knowledge of modern orchestration (Kubernetes) and container security
• Experience overseeing or managing CapEx and OpEx budgets
• Experience defining Service Level Objectives and Agreements and socializing them with technology and business stakeholders
• Demonstrated ability negotiating contracts with cloud providers, hardware vendors, and service providers

• Experience building, implementing, and supporting an InfoSec program
• Experience with AWS
• Familiarity with Governance, Risk, and Compliance (GRC) and building a risk register
• Experience with Infrastructure as Code (Terraform)
• Familiarity with operational technology (OT) environments or manufacturing/plant systems
• Experience with internal developer platforms or platform engineering practices (e.g., Backstage, golden-path tooling)
• Familiarity with regulatory frameworks (PCI, SOC2, GDPR)