Chief Information Security Officer

thrively; Culver City (CA); Hybrid; USD 260,000 - 420,000; Full time

Job summary

Thrively, a fintech company, is seeking a Chief Information Security Officer to lead security strategy across products and services. You’ll manage an approximately 20-person team, report to the CTO and collaborate with the board and president to align security with business goals.

You’ll architect security across cloud, identity and applications, oversee PCI DSS/SOC programs, and drive incident response while staying hands-on when needed.

Qualifications

• 15+ years in information security with leadership across a full security org.
• Security leadership in banking, payments or another regulated environment.
• Architect security solutions and stay hands-on, not just manage teams.
• Deep understanding of cloud, identity and application security.
• Hands-on PCI DSS, SOC 1 and SOC 2 programs.

Responsibilities

• Define and execute multi-year security strategy.
• Architect security across cloud, identity, network and applications.
• Lead PCI DSS, SOC 1/2 programs and regulatory partnerships.
• Oversee security operations, incident response and testing.
• Lead a 20-person security org and build leadership bench.

Skills

Security leadership

Security architecture

Regulatory compliance

Board communication

Incident response

Vendor management

Tools

AWS

Azure

PCI DSS

SOC 1/2

Identity security

Job description

Searching for a CISO in West LA or San Fran to lead Security for a FinTech Giant...

Thrively has partnered with a well-established financial technology company whose banking and payments platform serves millions of everyday Americans and a growing roster of enterprise partners. Operating in one of the most heavily regulated corners of financial services, its platforms move money and protect customer identities where security and trust are non-negotiable.

Our client is entering a new chapter as an independent, PE-backed company, and we're searching for a Chief Information Security Officer to lead the security organization through it.

This is more than an opportunity to run a security program. It's a chance to shape the security strategy of a company standing on its own for the first time, lead an established organization of approximately 20 people, and partner directly with the CTO, Board and President.

We're looking for a leader who still thinks like an engineer, leads like an executive, and understands that great security isn't about saying no. It's about protecting customers while helping the business move faster.

The Opportunity:

As Chief Information Security Officer, you'll own the strategy, architecture and execution of security across every product and service our client delivers. You'll report to the CTO and work directly with the president and board of directors.

You'll inherit an established team of approximately 20 across security operations, engineering, governance and identity, along with strong SOC 1, SOC 2 and PCI foundations. Your opportunity is to take a solid program and build it into what an independent, fast-moving, heavily regulated fintech needs next.

This is not an ivory-tower role. Our client wants a true technologist who can still architect solutions, get hands-on when it matters and lead from the front during a security incident.

Your mandate: Build a security organization that doesn't just protect the business. It helps the business grow.

What You'll Own:

Security Strategy & Architecture

• Define and execute a multi-year, risk-based security strategy aligned with the business, its products and its growth plans.
• Architect security solutions across cloud, identity, network and applications, and stay close enough to the technology to challenge design decisions alongside senior engineers.
• Understand the company's technical products deeply and build security into how they are designed, built and shipped.
• Bring an AI-savvy point of view to both sides of security: using AI to strengthen detection and response, and governing how AI is used across the business.

Compliance & Regulatory Partnership

• Mature and lead PCI DSS, SOC 1 and SOC 2 programs, building on strong existing foundations.
• Serve as the security point of contact for banking partners, card networks, regulators and enterprise customers.
• Translate regulatory requirements into practical controls that protect customers without slowing the business down.

Security Operations & Incident Response

• Own security operations, vulnerability management, and all security and penetration testing.
• Lead from the front during security incidents, with clear and calm communication to executives and the board.
• Manage outside security vendors and partners, holding them accountable for measurable risk reduction.

Leadership & Change Management

• Lead, develop and evaluate an established organization of approximately 20, building leadership bench strength across the team.
• Hire a Head of Product Security and shape the organization for the company's next stage.
• Drive the organizational and operating model changes needed as the company establishes itself as an independent business.
• Deliver clear, candid cyber risk reporting to the president and board of directors.

What You'll Bring:

We're looking for an accomplished security leader who is equally comfortable presenting cyber risk to a board and working through an architecture problem with senior engineers.

The ideal candidate brings:

• 15+ years in information security, including significant experience leading leaders across a full security organization.
• Security leadership in banking, payments or another heavily regulated environment, with responsibility for security across all products and services.
• A technologist's background: the ability to architect security solutions and stay hands-on, not just manage the people who do.
• Deep understanding of technical products and the security that surrounds them, including cloud (AWS and/or Azure), identity and application security.
• Hands-on experience with PCI DSS, along with SOC 1 and SOC 2 programs.
• A strong track record leading through security incidents and organizational change.
• Experience presenting to and partnering with a board of directors and executive leadership.
• A practical, current understanding of AI in cybersecurity, both as a tool and as a risk to govern.
• Experience managing outside security vendors and owning security and vulnerability testing programs.
• An active CISSP, CISM or equivalent certification preferred.

Why This Opportunity Stands Out:

A company writing its next chapter. Shape the security strategy of a fintech establishing itself as an independent, PE-backed business.

A real seat at the table. Work directly with the president and a board that includes a technical leader with a security background.

A strong foundation to build on. Inherit a team of approximately 20 and mature compliance programs, so you can focus on raising the bar rather than starting from zero.

Security that matters. Protect the money, identities and data of millions of everyday Americans and the partners who rely on our client.

Room to stay technical. Lead the organization while staying close to the architecture and the products.

Location:

West Los Angeles (Playa Vista) is highly preferred, with San Francisco second. Remote U.S. will be considered for exceptional candidates.

Protect What Matters:

The best security leaders don't measure success only in audits passed or incidents avoided. They build the trust that lets a business grow. If you're a hands-on security executive who loves building strong teams, solving hard technical problems and earning the confidence of boards and regulators, we'd welcome the opportunity to connect.