Chief Information Security Officer (CISO)

Xsolla; Canada; On-site; CAD 150,000 - 250,000; Full time

Job summary

Xsolla is seeking an experienced Chief Information Security Officer (CISO) to lead the global information security and compliance strategy. You will safeguard the company's products and customer data while aligning security initiatives with business objectives in the gaming ecosystem. This strategic role offers the opportunity to influence security standards and practices across the organization, ensuring trust with partners and users as Xsolla continues to grow.

Benefits

100% company-paid medical, dental, and vision plans

Unlimited Flexible Time Off

Personalized career roadmap

Professional development opportunities

Qualifications

• 10+ years of progressive experience in cybersecurity and compliance.
• Deep expertise in cloud-native security and application security.
• Experience with multiple compliance frameworks, including PCI DSS and GDPR.

Responsibilities

• Define and evolve enterprise-wide information security and compliance strategy.
• Advise executive team on security risks and investment decisions.
• Build and mentor a world-class security organization.

Skills

Cybersecurity

Compliance Management

Risk Management

Cloud Security

Leadership

Communication

Education

CISSP

CISM

CCSP

CISA

Tools

AWS Security Hub

Google Cloud Security Command Center

Palo Alto Networks

Job description

ABOUT US

At Xsolla, we believe that great games begin as ideas, driven by the curiosity, dedication, and grit of creators around the world. Our mission is to empower these visionaries by providing the support and resources they need to bring their games to life. We are committed to leveling the playing field, ensuring that every creator has the opportunity to share their passion with the world.

Headquartered in Los Angeles, with offices in Berlin, Seoul, and beyond, we partner with industry leaders like Valve, Twitch, and Ubisoft to clear the paths for innovation in gaming. Our global reach spans over 200 geographies, offering more than 700 payment methods in 130+ currencies.

Longevity Opportunity Vision Enjoy the game!

ABOUT YOU

Xsolla is seeking an experienced and visionary Chief Information Security Officer (CISO) to lead and scale our global information security and compliance strategy . As CISO , you will be responsible for safeguarding our products, platforms, infrastructure, and customer data across all regions . This is a strategic leadership role, essential to maintaining the trust of our partners and users as we grow and innovate in the global gaming ecosystem .

You will report directly to the CTO and work cross-functionally with executive leadership, engineering, legal, compliance, and product teams . Your mission is to align Xsolla’s security and compliance posture with its business objectives, ensuring world-class protection while enabling innovation and operational agility .

RESPONSIBILITES

• Define, drive, and continuously evolve Xsolla’s enterprise-wide information security and compliance strategy.
• Serve as the primary executive owner of cybersecurity risk management and cybersecurity incident response.
• Advise the executive team on security risks, priorities, and investment decisions.
• Align security initiatives with company objectives, regulatory requirements, and customer trust commitments.
• Build, lead, and mentor a world-class security organization, including security operations, application security, and GRC (governance, risk & compliance).
• Promote a culture of security-first thinking across all levels of the organization.
• Oversee security for private and public cloud infrastructure (AWS/GCP), SaaS applications, corporate IT, and development environments.
• Embed secure development practices into SDLC, CI/CD pipelines, DevSecOps, and infrastructure-as-code.
• Lead proactive threat modeling, secure code reviews, vulnerability management, and threat detection initiatives.
• Ensure a robust and tested incident response and disaster recovery framework.
• Own Xsolla’s compliance programs, including PCI DSS, SOC 1, SOC 2, GDPR, CCPA, and other applicable frameworks and regulations.
• Lead regular audits, risk assessments, and gap analyses to ensure ongoing compliance.
• Collaborate with Legal, IT, and external auditors to ensure policies and procedures align with evolving regulatory and industry requirements.
• Establish a company-wide risk management framework to identify, assess, mitigate, and monitor cybersecurity and compliance risks.
• Evaluate, implement, and manage security and compliance tooling across infrastructure, endpoints, and applications.
• Engage and manage third-party vendors for audits, penetration testing, threat intelligence, and managed services.
• Standardize scalable processes for vulnerability remediation and compliance monitoring.
• Translate security and compliance risks into business terms and effectively communicate them to executive leadership and stakeholders.
• Deliver regular reports, metrics, and board-level updates on security posture, risk, and compliance.

REQUIREMENTS

• 10+ years of progressive leadership experience in cybersecurity and compliance, ideally in SaaS or enterprise technology environments.
• Deep expertise in cloud-native security (AWS/GCP), application security, data protection, and risk management.
• Direct experience managing compliance programs across multiple frameworks (PCI DSS, SOC 1/2, GDPR, ISO 27001, etc.).
• Proven ability to scale security programs globally while aligning with business and product objectives.
• Strong communication and executive reporting skills.
• Experience leading secure development and DevSecOps practices in high-growth environments.

NICE TO HAVE

• Experience in the gaming industry, fintech, or B2B platform services.
• Familiarity with tools such as Palo Alto Networks, Google Cloud Security Command Center (SCC), AWS Security Hub / AWS GuardDuty, or other cloud and code security platforms.
• Professional certifications: CISSP, CISM, CCSP, CISA, or similar.
• Deep understanding of global data privacy regulations and cross-border data handling.

Equal Employment Opportunity Statement:

Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law.

We consider qualified applicants with criminal histories in accordance with the Fair Chance Act.

Criminal History Consideration:

For the Chief Information Security Officer (CISO), we will conduct a background check that may include the following:

Criminal history check

Employment verification

Education verification

Relevance to Job Responsibilities:

The background check is relevant to this position because of the following role responsibilities:

Accessing confidential company data

Ensuring compliance with regulatory requirements

Handling sensitive financial information/managing budgets/accessing funds

Rights Under the Fair Chance Act:

Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact [e-mail] .

Benefits:

We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes 100% company-paid medical, dental, and vision plans, unlimited Flexible Time Off, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play.

By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with this Xsolla Privacy Notice for Job Applicants . Please direct any inquiries regarding your data privacy to [e-mail].