Full-Time Chief Information Security Officer

• Security Strategy & Leadership: Create and drive a forward-looking security strategy aligned with business goals and evolving threats. Serve as the executive voice of security across the organization and with external stakeholders. Own the security budget and ensure smart investment in impactful technologies and initiatives.
• Operational & Product Security: Oversee all security operations - from threat detection and vulnerability management to incident response and SOC leadership. Embed security across the SDLC, ensuring secure architecture, code reviews, and DevSecOps practices are second nature.
• Regulatory & Risk Compliance: Ensure ongoing compliance with PCI DSS, SOC 2, GDPR, HIPAA, and other key frameworks. Maintain robust business continuity and disaster recovery plans. Manage payment security, fraud prevention, and third-party risk assessments.
• Security Culture & Awareness: Build a company-wide security culture through engaging training, awareness programs, and clear communication. Foster a “security-first” mindset without slowing down innovation.

• Deep expertise in cybersecurity frameworks (NIST CSF v2.0, CMMC), cloud security, and secure software architecture.
• Proven success in leading security for SaaS or payments companies - balancing compliance, innovation, and speed.
• Mastery of PCI DSS and SOC 2 audits and continuous compliance programs.
• Strong leadership, decision-making, and crisis management skills, with the ability to translate complex security topics for non-technical audiences.
• Proficiency with SIEM, EDR, IDS/IPS, DLP, WAF, and cloud-native security tools.

What is the last date for applying to the job?

Which countries are accepted for this remote job?