CISO, Chief Information Security Officer

This is a fully remote position, open to applicants in United States.

📋 Description

• Define and spearhead the organization's information security vision, roadmap, and operational framework.

• Align security initiatives with organizational objectives, ensuring prioritization based on risk assessment.

• Enhance the security posture across infrastructure, cloud services, applications, and endpoints.

• Oversee the security operations center (SOC), managing incident response, threat detection, and vulnerability management.

• Develop and implement playbooks for threat mitigation and breach containment.

• Ensure swift and effective resolution of incidents.

• Remain actively involved in security architecture evaluations, secure Software Development Life Cycle (SDLC) practices, penetration testing, and cloud security configurations.

• Review and enforce policies pertaining to identity and access management (IAM), zero trust architecture, encryption, and secure networking.

• Collaborate closely with engineering, IT, DevOps, and product teams to implement secure-by-design practices.

• Ensure adherence to relevant standards and regulations (e.g., ISO 27001, SOC 2, GDPR, HIPAA, NIST).

• Lead internal and external audits, risk assessments, and vendor security evaluations.

• Develop and sustain a robust business continuity and disaster recovery strategy.

• Engage with field teams to support customer interactions as required.

• Proactively cultivate and maintain relationships with key peers and Chief Information Security Officers (CISOs) at client organizations, establishing credibility.

• Promote a culture of security awareness and responsibility throughout the organization.

• Build, mentor, and lead a high-performing security team.

• Communicate risks, incidents, and key performance indicators (KPIs) to executive leadership and the board.

⛳️ Requirements

• 10+ years of progressive experience in cybersecurity, including a minimum of 3+ years in a senior security leadership position.

• Demonstrated experience in implementing and managing modern security frameworks across on-premises, hybrid, and cloud environments (e.g., AWS, Azure).

• In-depth technical knowledge of security infrastructure, Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), network security, IAM, application security, and cryptography.

• Proven history of hands-on participation in incident response and threat management.

• Strong understanding of compliance, governance, risk management, and auditing processes.

• Experience working with regulators, auditors, and enterprise clients on security issues.

• Exceptional communication and stakeholder management abilities.

• Relevant certifications such as CISSP, CISM, CISA, or SANS GIAC are highly preferred.

🏝️ Benefits

• Competitive Salary & Incentives: We provide a competitive compensation package along with pre-IPO equity to recognize your hard work and commitment.

• Health & Wellness: Comprehensive medical, dental, and vision insurance plans to ensure you and your family remain healthy and protected.

• Paid Time Off (PTO): Enjoy a generous PTO policy that encompasses vacation days, sick leave, and paid holidays to recharge and attend to personal matters.

• Flexible Work Environment: We acknowledge the significance of work-life balance. Benefit from the flexibility of remote work, with a hybrid option to tailor your work schedule as needed.

• Professional Development: We are committed to continuous learning. Access training, certifications, and educational resources to advance your career and keep pace with industry trends.

• Employee Recognition: We celebrate achievements, both large and small, through regular recognition programs and awards that underscore your contributions to our collective success.

• Collaborative Culture: Join a dynamic, inclusive, and supportive team where innovation and collaboration are central to everything we do.

• Parental Leave: Generous parental leave policies to support you during significant life events.