Chief Information Security Officer

Quiet Capital; New York (NY); Hybrid; USD 300,000 - 375,000; Full time

Benefits offered by this job

401(k) match

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Paid parental leave

Wellness reimbursement

Company phone

Personal development allowance

Paid time off

Holidays

Job summary

DriveWealth in New York is seeking a Chief Information Security Officer to lead the company’s security program across GRC, offensive and defensive security, and security engineering. You will shape strategy, elevate processes, manage budgets, and build teams to support growth.

The role requires fintech/regulatory experience, cloud-first and zero-trust expertise, and a proven track record building security programs for public or pre-IPO companies.

Qualifications

• Experience in regulated industries, fintech preferred.
• Cloud-first and zero-trust security knowledge.
• Proven track record building security programs for public or pre-IPO companies.
• Hands-on leadership to grow high-performing teams.
• Standards compliance: SOC, ISO27001, GDPR.
• Experience presenting security strategy to executives and board.
• Familiarity with FINRA, ISAC and regulatory forums.
• Ability to manage budgets and vendor relationships in a dynamic environment.

Responsibilities

• Oversee policy frameworks and regulatory compliance programs (SOC, ISO27001, GDPR).
• Conduct security monitoring, incident response, and threat hunting functions.
• Direct penetration testing and vendor management activities.
• Lead the engineering of secure network and identity management systems in the cloud.
• Build, mentor, and expand a security team across underdeveloped areas (GRC/Blue Team).
• Engage with industry forums, prepare audit and compliance reports, and present to leadership.

Skills

GRC leadership

Threat hunting

Red Team

Blue Team

Cloud security

Zero-trust

Security architecture

Budget management

Vendor management

Executive briefing

Job description

About Us

DriveWealth is on a mission to make investing easier. We believe that everyone should have the ability to control their financial future, and that access to financial markets should not be limited by geography, wealth, or legacy systems. We are a global B2B financial technology organization dedicated to democratizing access to financial independence around the world. Our mission is realized through an API-based platform, empowering our partners to offer seamless investing and trading experiences to clients worldwide, all from their mobile devices. Our technology provides partners with a modern, extensible toolkit, enabling traditional investment workflows and innovative techniques like fractional share ownership. DriveWealth has evolved into a global platform offering trading of U.S. equities, mutual funds, ETFs, fixed income, and options.

There’s never been a better time to build a category‑defining business and there has rarely been a team better positioned for this opportunity. Our culture blends the pace and agility of a fintech start‑up with the impact, stability, and discipline of Wall Street. We encourage creativity and experimentation while ensuring institutional‑grade execution and regulatory compliance in everything we do. Join us and help build the future of global investing!

About the Role

As Chief Information Security Officer, you will be responsible for leading and strengthening the company’s entire security function across four key domains: Governance, Risk & Compliance (GRC), Offensive Security (Red Team), Defensive Security (Blue Team), and Security Engineering & Architecture. You will take charge of strategy, improve processes, manage budgets, and build out teams to support ambitious growth goals. The CISO will also represent security to senior leadership and the board, ensuring the organization is compliant with industry standards and ready for regulatory scrutiny.

What You’ll Do

• Oversee and enhance policy frameworks and regulatory compliance programs (e.g., SOC, ISO27001, GDPR)
• Conduct and improve security monitoring, incident response, and threat hunting functions
• Direct penetration testing and vendor management activities
• Lead the engineering of secure network and identity management systems in the cloud
• Build, mentor, and expand a skilled security team across underdeveloped areas (especially GRC and Blue Team)
• Engage with industry forums, prepare audit and compliance reports, and present to company leadership
• Drive readiness for public company listing and support ongoing business growth

What You’ll Need

• Strong experience in regulated industries (preferably fintech; healthcare also considered)
• Deep knowledge of cloud‑first and zero‑trust security models
• Proven track record in building full‑scale security programs for public or pre‑IPO companies
• Hands‑on leadership with the ability to develop and expand high‑performing teams
• Expertise in standards compliance, including SOC, ISO27001, and GDPR
• Experience presenting security strategy to executive and board‑level leadership
• Familiarity with security certifications and regulatory forums (e.g., FINRA, ISAC)
• Ability to manage budgets and vendor relationships in a dynamic environment

Compensation package offerings are based on candidate experience and technical qualifications, as it relates to the role. These are identified and determined throughout your interviewing experience. Please note this role is expected to come into our office on a cadence set by the hiring manager/team.

New York, NY (Hybrid) Pay Range

300,000 – 375,000 USD

Working at DriveWealth

We do our best work when we’re in the same room. To maintain the speed our partners expect, our New York, Chicago, and Lithuania teams work in office on a hybrid schedule. We’ve found that being physically side‑by‑side is the only way to solve complex problems in real‑time and stay truly accountable to the products we ship. When you’re here, you’re working directly with the people making the decisions.

To support that work, we provide competitive compensation, equity, and a 401(k) match. We also offer medical insurance, dental insurance, vision insurance, disability insurance, and paid parental leave, along with a wellness reimbursement, a company‑provided phone, and a personal development allowance. Finally, we value the time you spend away from the office with generous paid time off (PTO) and observed holidays.

Work Authorization

Applicants must possess the legal right to work in the country where the position is located at the time of application. DriveWealth requires all employees to provide original documentation verifying their work authorization on or before their first day of employment.

For U.S.‑based roles: Applicants must be currently authorized to work in the United States on a full‑time basis without the need for current or future visa sponsorship. DriveWealth does not provide visa sponsorship or support for employment authorization, including transfers, at this time. Offers of employment are strictly contingent upon an individual’s ability to secure and maintain the legal right to work at the Company.

How We Think About AI

We leverage AI to work smarter and move faster. We seek AI‑curious talent who are proactive about using emerging tools to increase signal quality, reduce friction, and improve outcomes to deliver products faster, provide better service to our partners, and to streamline processes. Your ability to leverage our internal tools and technology to drive results is as important to us as your core domain expertise.

Compensation

Pay is generally based on the level, complexity, responsibility, location, and job duties/requirements of the specific position. We then source candidates with the requisite skills, expertise, education, training, and experience. If you are selected for an interview, please feel welcome to speak to a recruiter about our compensation philosophy and other available benefits. This role is eligible for base, bonus, equity, 401(k) match, and heavily subsidized benefits and perks.

Equal Employment Opportunity

To build technology and products that are used and loved by people and solve real‑world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply.

Agency Disclaimer

DriveWealth does not accept agency resumes. Do not forward resumes to our jobs alias, employees, or any other organization location. DriveWealth is not responsible for any fees related to unsolicited resumes.