CISO

This is a fully remote position, open to applicants in North America.

📋 Description

• Develop and implement Ent's comprehensive security strategy and roadmap, establishing priorities, responsibilities, and measurable results.

• Take charge of critical evaluations, control design, remediation efforts, and incident management.

• Create a dedicated internal security team and operational framework, utilizing external partners when beneficial.

• Manage security risks associated with identities, employee endpoints, SaaS applications, cloud infrastructure, company data, software supply chains, and third-party vendors.

• Collaborate with Engineering and Product teams on architecture, threat modeling, secure design evaluations, vulnerability management, secrets and dependency management, logging, monitoring, and remediation efforts.

• Develop and enhance controls for identity and access management, device security, privileged access, data protection, configuration management, and employee onboarding and offboarding processes.

• Lead incident response initiatives, encompassing detection, escalation, investigation, containment, communication, tabletop exercises, post-incident assessments, business continuity, and disaster recovery enhancements.

• Oversee security assurance and compliance programs, including SOC 2, ISO 27001, FedRAMP, and customer-specific standards.

• Manage security diligence for customers and partners, including questionnaires, audits, penetration testing, security assessments, and contractual security obligations.

• Formulate policies and provide security education regarding sensitive data, approved AI tools, and the risks associated with AI agents and automation.

• Utilize Ent's product internally and offer structured feedback to the Product, Engineering, and Research teams.

• Communicate Ent's risk management, readiness, incidents, and investment priorities to the executive team and board.

• Represent Ent in high-level customer security discussions as necessary.

⛳️ Requirements

• Proven experience in roles such as CISO, Deputy CISO, Head of Security, or similar in a rapidly growing technology company.

• Strong preference for experience in establishing a security program during the early stages of growth.

• In-depth technical expertise in cloud, identity, endpoint, application, product, and infrastructure security.

• Experience in securing cloud-first environments and modern identity and device ecosystems.

• Familiarity with AWS, Azure, or GCP platforms.

• Experience with Google Workspace or Microsoft Entra ID.

• Knowledge of macOS and Windows device management.

• Strong proficiency in incident response, vulnerability management, security monitoring, third-party risk assessment, data protection, and secure software development practices.

• Experience in developing and maintaining security assurance or compliance programs such as SOC 2, ISO 27001, or FedRAMP.

• Familiarity with the diligence requirements of complex enterprise or government clients.

• Up-to-date understanding of security risks posed by AI systems, generative AI, autonomous agents, sensitive data flows, and evolving development tools.

• Possess sound risk judgment and a practical approach to operations.

• Ability to navigate between strategic planning and execution.

• Excellent communication skills for engaging with technical teams, executives, board members, customers, auditors, and partners.

• A low-ego, highly collaborative mindset with a knack for building trust across various functions.

🏝️ Benefits

• Every teammate receives significant equity in addition to their salary.

• Ent covers 90% of medical, dental, and vision expenses.

• Coverage extends to 75% for dependents.

• Flexible Paid Time Off (PTO).

• 12 weeks of fully paid maternity leave (including birth, adoption, or foster care).

• 8 weeks of fully paid paternity leave.

• $100 monthly lifestyle account for fitness, wellness, learning, and more.

• $500 stipend for home office setup when joining as a remote employee.

• A distributed workplace with remote hiring across North America.