A Letter from Frank Weigel, Head of Security

From various roles at companies like CreditKarma, SigFig, and Lattice, my career in Information Security and IT has been focused on building reliable frameworks that grow with the company. At Lattice, for instance, I developed a security program that supported the company’s growth to 700 employees.

The challenge of security is that it protects against risks that are sometimes hard to quantify and not very tangible. A company is doing a good job if nothing bad happens — but nothing bad happening is often the result of a lot of work behind the scenes:

• It requires senior management to recognize the importance of security and give it priority and budget. 
• It succeeds off a commitment to staying in pace or ahead of evolving technology and legislation (GDPR is now a norm versus a future goal).
• It thrives when there’s an early commitment to the processes and tools required for proper security.

From my early conversations with leadership at Ashby, it was evident that all the above was very mature given the size of the company. That makes the opportunity of taking security to the next level an exciting opportunity and one I was excited to drive. 

Why I Chose to Come to Ashby

Beyond the company’s commitment to security, Ashby for me is the people and the product. Throughout my career, I’ve seen the limitations of various Applicant Tracking Systems (ATS’) from both hiring and candidate perspectives. Ashby, however, stands out with its thoughtful approach and dedication to improving the hiring landscape.

From my first interactions with the team, I was impressed by the humility and professionalism of everyone at Ashby. This is a company where people genuinely care about their work and each other. And as importantly for me, Ashby treats security as a first-class product, recognizing its critical importance. The leadership at Ashby understands that investing in security and staying well ahead of industry norms is essential. This forward-thinking approach makes Ashby an exciting place to work and ensures that, as a Security leader, I feel valued.

What I Hope to Achieve at Ashby

At a high level, the goal of Information Security is to protect the:

• Confidentiality of information: For instance, keep the data of individuals confidential as public exposure might cause them harm.
• Integrity of information: For instance, ensure their data cannot be tampered with so that hiring decisions can be trusted.
• Availability of information: For instance, make sure Ashby customers can use the Ashby system since there might be a financial loss for them if they can't.

My goal is to enhance our security measures across all these even further; it’s critical work that requires a proactive and comprehensive approach.

I believe that security measures need to be implemented in a way that doesn’t get in the way of employees or customers doing their work. Apart from just implementing security measures, security should be consulting the business on how to conduct their tasks in a secure fashion. I see security as the department of “How,” not “No.”

I plan to build on the strong foundation already in place by:

• Implementing stronger controls and processes in corporate, product, and cloud security — while still keeping the user experience in mind
• Ensuring we continue to meet international standards (such as GDPR, CCPA, and New York’s AI Bias Law)
• Using my Security and IT experience to support the development of excellent features and guidance that help our customers fulfill their compliance obligations
• Addressing any concerns directly and demonstrate our ongoing commitment to security and privacy

Being part of Ashby means joining a team dedicated to making a meaningful impact. I’m excited to contribute to our mission of improving the hiring process for companies and candidates alike. Together, we’ll continue to set new standards in the industry, ensuring that security remains a key part of our success.

I want to end by thanking the Ashby team for the warm welcome. I’m delighted to be here and look forward to working with everyone.