Deputy CISO

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with the CISO to establish and implement the security strategy, roadmap, and key priorities.

• Act as the deputy and escalation contact for the CISO, representing security leadership in interactions with executives and the board when necessary.

• Provide guidance and oversight throughout the security organization.

• Build, mentor, and lead a team of security engineers and architects.

• Manage security budget planning, vendor/tool assessment, and resource allocation decisions.

• Evaluate security architecture across cloud platforms, applications, APIs, and infrastructure.

• Conduct threat modeling and architectural reviews for significant systems and initiatives.

• Promote secure-by-design methodologies within the SDLC and CI/CD pipelines in collaboration with DevOps and engineering leaders.

• Lead or supervise major security incident responses, technical root cause analyses, and remediation strategies.

• Monitor the threat landscape, offensive security techniques, and emerging technologies, including AI/ML systems.

• Articulate technical risks to non-technical stakeholders and executive leadership.

• Represent security in cross-functional discussions.

⛳️ Requirements

• 12+ years of experience in security engineering, security architecture, or technical security leadership roles, with a proven track record of hands-on technical involvement.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline from a reputable institution.

• Extensive, hands-on knowledge of AWS cloud security architecture, including infrastructure-as-code.

• Solid background in application security, secure software development, and contemporary architectural patterns such as microservices, containers, APIs, and zero-trust.

• Capability to analyze and assess system architecture and code at a technical level.

• Experience leading technical incident responses, including root cause analyses for complex, multi-system incidents.

• Proven experience in building and leading technical security teams.

• Strong communication abilities and the capacity to convey technical risks in business terms for executives and the board.

• Preferred: previous experience as a CISO, Deputy CISO, or Head of Security Engineering.

• Preferred: CISSP certification.

• Preferred: experience with AI/ML security, including familiarity with OWASP LLM Top 10, MITRE ATLAS, or NIST AI RMF.

• Preferred: experience in regulated industries such as fintech, healthcare, or scalable SaaS.

🏝️ Benefits

• Bonus, equity, and benefits are applicable but are not included in the stated base salary.

• Details of US benefits can be found at https://www.ethoslife.com/careers/.

• A diverse, inclusive, and authentic workplace.

• Equal opportunity employer.