Chief Information Security Officer
New
J
JobgetherFinancial services
Based in the United States, across multiple time zonesContractExecutive
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years of experience in information security, including at least 3 years leading a security function as a CISO, Head of Security, or equivalent within an organization of 100+ employees.
- Required Skills
- AWS
Requirements
- Have 10+ years of experience in information security.
- Have at least 3 years leading a security function as a CISO, Head of Security, or equivalent in an organization of 100+ employees.
- Demonstrate experience leading real-world security incidents, including executive communication and decision-making during active incidents.
- Have established or rebuilt an early-stage security program covering strategy, policies, technology, employee training, and incident response.
- Have practical experience using AI agents and AI-powered tools in security operations, including detection development, reviews, documentation analysis, policy drafting, and automation.
- Be able to demonstrate AI-driven security workflows, agentic systems, or automation frameworks and exercise judgment about human oversight.
- Have current knowledge of AI security risks, including prompt injection, excessive agent permissions, credential and data exposure, and vulnerabilities in AI-generated code.
- Have hands-on expertise in cloud security, preferably AWS, as well as identity and access management, SIEM, endpoint protection, and email security.
- Have strong scripting and programming capabilities and experience developing security tools and automation.
- Have experience in crypto, fintech, or another high-fraud industry, with knowledge of phishing, social engineering, and impersonation attacks.
- Be able to assess technical documentation, contracts, vendor security requirements, and compliance evidence thoroughly.
- Be comfortable as a player-coach, spending approximately half the role on hands-on execution while leading a small remote team across multiple time zones.
- SOC 2 or ISO 27001 preparation experience is a plus; relevant certifications such as CISSP, CISM, GCIH, or OSCP are also a plus.
Responsibilities
- Define and own the information security strategy, roadmap, and budget across brands and business units.
- Brief group leadership on security posture, emerging threats, risks, and trends.
- Lead incident response from detection and triage through recovery and post-incident reviews.
- Coordinate incident response with legal counsel, forensic specialists, insurers, and regulators, and conduct tabletop exercises.
- Establish cloud security standards, particularly for AWS, and oversee identity and access management.
- Evaluate third-party vendors and data providers and set security requirements before they access company systems or data.
- Establish security standards for customer-facing platforms and lead phishing prevention, email security, and employee awareness training.
- Develop security policies and support SOC 2 and ISO 27001 readiness with Legal and Compliance.
- Build and maintain an inventory of the organization's attack surface and oversee the security technology stack.
- Design and operate AI-driven security systems and workflows, and establish standards and safeguards for AI systems and agents.
View Full Description & ApplyYou'll be redirected to the employer's site
