> The Director of Security will initially report directly to the VP Engineering. We are currently engaged in a recruiting process for a new CFO - after this person is on board, we will move the security team under them.

This is a mistake - I would strongly recommend you keep security in engineering.