Chief Information Security Officer

Cyberjobs; San Francisco (CA); On-site; USD 250,000 - 450,000; Full time

Job summary

Cyberjobs in San Francisco seeks a dynamic Chief Information Security Officer to shape and drive the enterprise security program. You will lead security across AppSec, InfraSec, and GRC, manage vendor risk, and ensure regulatory compliance while partnering with engineering and product teams.

You will report to the executive team, build a world-class team, and communicate security posture to board-level stakeholders. A CISSP and proven leadership are essential.

Qualifications

• 10+ years of cybersecurity experience with 5+ years in leadership roles.
• Deep expertise in SOC 2, ISO 27001 and GDPR compliance.
• CISSP certification required and board-level reporting experience.
• Strong executive communication and strategic thinking.

Responsibilities

• Define and execute enterprise security strategy and roadmap.
• Build and lead security teams across AppSec, InfraSec, and GRC.
• Manage vendor risk assessments and regulatory compliance programs.
• Mentor and develop a high-performing security team.
• Collaborate with engineering, product, and executive leadership to integrate security.
• Develop and implement security policies, procedures, and standards.
• Monitor and report on security metrics and KPIs.
• Identify and mitigate security risks and ensure legal/regulatory compliance.
• Oversee incident response, business continuity, and disaster recovery plans.
• Oversee security budgets and resources to align with business objectives.

Skills

CISSP

Leadership

Governance

Executive reporting

Compliance (SOC 2, ISO 27001, GDPR)

Cybersecurity

Job description

We are seeking a dynamic and visionary Chief Information Security Officer (CISO) to lead our information security strategy, manage risk, and build a world-class security organization from the ground up.

Requirements: 10+ years of experience in cybersecurity with 5+ years in leadership roles. The ideal candidate will possess deep expertise in compliance frameworks (SOC 2, ISO 27001, GDPR) and hold a CISSP certification. Additionally, they should have executive communication and board-level reporting experience.

Responsibilities: As a CISO, this position entails defining and executing the enterprise security strategy and roadmap, building and leading the security team across AppSec, InfraSec, and GRC functions, and managing vendor risk assessments and regulatory compliance programs. This role requires strong leadership skills, with the ability to mentor and develop a high-performing team. The CISO will work closely with cross-functional teams, including engineering, product, and executive leadership, to ensure the integration of security into all aspects of the business. They will be responsible for developing and implementing security policies, procedures, and standards, as well as monitoring and reporting on security-related metrics and key performance indicators (KPIs). The CISO will also be responsible for identifying and mitigating security risks, and ensuring compliance with relevant laws, regulations, and industry standards. This role requires excellent communication and interpersonal skills, with the ability to effectively communicate security-related information to both technical and non-technical stakeholders. The CISO will be a strategic thinker, with the ability to balance business needs with security requirements. They will be a collaborative leader, with a strong focus on building and maintaining relationships with key stakeholders, including executive leadership, customers, and partners. They will also be responsible for overseeing the development and implementation of incident response plans, business continuity plans, and disaster recovery plans. Additionally, they will work closely with the IT and engineering teams to ensure that security is integrated into all aspects of the business, including the development and deployment of new applications and services. The CISO will also be responsible for managing security-related budgets and resources, and ensuring that security investments are aligned with business objectives. They will be a key member of the executive leadership team, providing strategic guidance and counsel on security-related matters.

Skills: The ideal candidate will possess the following skills and qualifications:

Cybersecurity expertise: The CISO will have deep expertise in compliance frameworks (SOC 2, ISO 27001, GDPR) and hold a CISSP certification. They will be able to design and implement comprehensive security programs that align with industry best practices. They will have a strong understanding of security technologies, including firewalls, intrusion detection and prevention systems, encryption, and secure access controls. They will also be familiar with security frameworks and standards, such as NIST Cybersecurity Framework and ISO 27001.

Leadership and management: The CISO will have 5+ years of experience in leadership roles and be able to mentor and develop a high-performing team. They will have excellent communication and interpersonal skills, with the ability to effectively communicate security-related information to both technical and non-technical stakeholders. They will be a strategic thinker, with the ability to balance business needs with security requirements. They will be a collaborative leader, with a strong focus on building and maintaining relationships with key stakeholders, including executive leadership, customers, and partners.

Communication and interpersonal skills: The CISO will have excellent communication and interpersonal skills, with the ability to effectively communicate security-related information to both technical and non-technical stakeholders. They will be able to build and maintain relationships with key stakeholders, including executive leadership, customers, and partners.

Strategic thinking and problem-solving: The CISO will be a strategic thinker, with the ability to balance business needs with security requirements. They will be able to identify and mitigate security risks, and ensure compliance with relevant laws, regulations, and industry standards.

Collaboration and teamwork: The CISO will be a collaborative leader, with a strong focus on building and maintaining relationships with key stakeholders, including executive leadership, customers, and partners. They will work closely with cross-functional teams, including engineering, product, and executive leadership, to ensure the integration of security into all aspects of the business.