Chief Information Security Officer

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and execute a comprehensive enterprise security strategy that safeguards internal systems, operations, and corporate assets while enhancing customer trust externally.

• Act as the executive authority on information security, risk management, and security compliance, ensuring alignment with corporate objectives and regulatory standards.

• Work collaboratively with product, engineering, and business teams to integrate security design principles and practices throughout all Keyfactor offerings.

• Represent Keyfactor to customers, partners, industry forums, and regulators to foster trust, demonstrate compliance, and communicate security commitments.

• Lead enterprise security operations, focusing on threat detection, incident response, vulnerability management, and proactive risk mitigation.

• Maintain and enhance the Information Security Management System (ISMS), ensuring compliance with ISO 27001, SOC 2, FedRAMP, and emerging standards such as ISO 42001 for AI.

• Define and implement security policies, procedures, and standards that guarantee internal resilience and provide external assurance for clients and partners.

• Conduct organization-wide risk assessments, audits, and reviews to identify, quantify, and address security threats both internally and within customer-facing services.

• Collaborate with Compliance and Legal teams to ensure adherence to global data protection, privacy, and regulatory standards (e.g., GDPR, CCPA, FedRAMP, AI).

• Serve as the executive sponsor for security certifications, audits, and customer assurance initiatives that validate Keyfactor’s external trust posture.

• Provide periodic assessments to Keyfactor senior leadership regarding current and emerging threats and the organization's strategies to mitigate those threats.

• Ensure that Keyfactor’s corporate security training and awareness program is optimized to engage employees and enhance security culture.

• Collaborate with product and engineering teams to integrate security throughout the entire product lifecycle, including design, development, deployment, and maintenance.

• Advocate for secure software development practices, cryptographic innovation, and identity management solutions that safeguard customer data and enhance trust.

• Act as the primary contact for customers and partners concerning security issues, audits, and assurance programs, bolstering Keyfactor’s reputation as a trusted provider.

• Build, lead, and mentor a high-performing global security organization focused on both internal protection and external assurance.

• Set clear objectives, performance metrics, and professional development pathways for security, risk, and compliance teams.

• Promote a culture of proactive risk management, operational excellence, and cross-functional collaboration.

⛳️ Requirements

• Significant experience (approximately 15+ years) in information security, including senior leadership or CISO-level roles.

• In-depth expertise in cryptography, PKI, identity management, cloud security, and enterprise security architecture.

• Proven experience in leading enterprise security strategy within SaaS or cloud-native organizations.

• Strong understanding of regulatory and compliance frameworks, including ISO 27001, SOC 2, FedRAMP, GDPR, and emerging AI governance standards.

• Demonstrated ability to convey complex security concepts to executives, boards, customers, and regulators.

• Excellent leadership, collaboration, and strategic planning abilities.

🏝️ Benefits

• Second Fridays (a company-wide day off on the second Friday of every month, excluding November and December due to the holiday schedule). Please note that this benefit may change.

• Comprehensive global benefit coverage.

• Generous paid parental leave available globally.

• Competitive time off policy worldwide.

• Dedicated employee-focused ambassadors through Key Contributors & Culture Committees.

• DIVERSE Commitment, a call to action for a more inclusive and diverse future in business, society, and technology.

• The Keyfactor Alliance Program to support DEIB initiatives.

• Wellbeing resources, wellness allowance, free membership to mindfulness apps, and Wellness Wednesdays.

• Global Volunteer Day, company non-profit matching, and three volunteer days off.

• Monthly Talent development and Cross Functional meetings to encourage professional growth.

• Regular All Hands meetings followed by group gatherings.