Chief Information Security Officer
About the Role
You will lead and operate information security, IT operations, and technical compliance programs. You will define security policy and risk posture, manage audits and certifications, oversee platform and crypto security (including private key management, MPC/HSM custody, and smart contract audit oversight), run incident response, and support regulatory and audit processes.
Requirements
- Senior leadership experience in information security (CISO, VP Security, or equivalent)
- Proven ownership of audits and certifications such as SOC 1, SOC 2, SOX, ISO, and regulatory exams
- Strong understanding of cloud security (AWS or equivalent)
- Direct experience with crypto assets and private key management
- Experience with MPC or HSM based infrastructures
- Experience with smart contract audits and third-party security reviews
- Proven ability to operate credibly with regulators, auditors, and institutional partners
- Experience operating in regulated financial environments
- Experience in fintech, capital markets, or digital securities (nice to have)
- Familiarity with SEC regulated entities and fund structures (nice to have)
- Experience scaling security organizations in fast-growing companies (nice to have)
Responsibilities
- Own and operate internal IT environment and end-user services across business units and regulated entities
- Manage endpoint lifecycle including laptops, mobile devices, and accessories
- Implement IT onboarding and offboarding processes
- Design and manage identity and access management and role based access control for corporate systems
- Operate helpdesk and Tier 1 and Tier 2 support operations
- Manage software asset management and license compliance
- Deploy and maintain endpoint security tooling such as EDR, MDM, antivirus, and DLP
- Lead employee security awareness and phishing training
- Support IT for regulatory exams, subpoenas, and information requests
- Define and maintain corporate security policies and risk posture
- Run vendor and third-party risk management programs
- Lead security incident response governance and participate in material incidents and retrospectives
- Develop business continuity and disaster recovery plans for internal systems
- Maintain asset inventory, audit logging, and evidence management
- Prepare and manage security audits, compliance, and certifications including SOC, SOX, ISO, and DORA readiness
- Review and approve security architecture principles for the platform
- Oversee secure software development practices and DevSecOps
- Coordinate platform penetration tests and smart contract audits
- Oversee private key management models and MPC or HSM based custody infrastructures
- Define policies for wallets, signing authorities, and access controls
Benefits
- Unlimited Paid Time Off (PTO)
- Equity Grant Opportunities
- Remote Work Flexibility
- 100% employer-paid Medical Dental and Vision insurance for employee and family
- 401(k) Retirement Plan