Chief Information Security Officer

The Security Executive Council; San Francisco (CA); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Company-paid medical, dental, and vision coverage

Monthly fitness reimbursement

401(k) with a 2.5% match

Meal program

Flexible PTO

Job summary

A fast-growing fintech firm in San Francisco is seeking a Chief Information Security Officer to develop and implement its information security strategy. The ideal candidate will have significant experience in cybersecurity, particularly in fintech. This role involves overseeing security operations, ensuring regulatory compliance, and mitigating risks. The company provides competitive compensation and excellent benefits, including comprehensive insurance coverage and flexible PTO.

Qualifications

• 10+ years of progressive experience in cybersecurity, with at least 5 years in a senior leadership role at a fintech or high‑growth tech company.
• Deep expertise in securing credit and lending platforms, preferably in the fintech industry.
• Experience leading incident response and vulnerability management programs.

Responsibilities

• Develop and execute a comprehensive cybersecurity strategy.
• Ensure compliance with fintech and data privacy regulations.
• Oversee designing and monitoring of security controls for financial products.

Skills

Cybersecurity expertise

Leadership capabilities

Regulatory compliance knowledge

Communication skills

Education

Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology

Job description

About the job

Company

Credit Genie is a mobile‑first financial wellness platform designed to help individuals take control of their financial future. We leverage artificial intelligence to provide personalized insights and are building a financial ecosystem by offering tools and services that provide instant access to cash and building credit. Our goal is to empower every customer to achieve long‑term financial stability.

Founded in 2019 by Ed Harycki, former Swift Capital Founder (acquired by PayPal in 2017). Backed by Khosla Ventures and led by industry pioneers from companies such as PayPal, Square, and Cash App, we are well positioned to build the future of inclusive finance through cutting‑edge technology and customer‑centric solutions.

Overview

As Chief Information Security Officer (CISO), you will be the primary leader responsible for developing and implementing our information security strategy. You’ll protect our systems, data, and customer trust by overseeing cybersecurity operations, ensuring compliance with regulatory standards, and mitigating risks in a dynamic fintech environment. This role demands a visionary leader with deep expertise in cybersecurity, preferably in fintech, and a passion for securing innovative financial products.

What You’ll Do

• Develop and execute a comprehensive cybersecurity strategy to protect our platform, customer data, and intellectual property.
• Ensure compliance with fintech and data privacy regulations, including GDPR, CCPA, PCI‑DSS, and other relevant standards.
• Oversee the design, implementation, and monitoring of security controls for payment processing, lending platforms, and other financial products.
• Lead incident response, including managing and mitigating cybersecurity breaches, vulnerabilities, and regulatory inquiries.
• Collaborate with product, engineering, and compliance teams to embed security‑by‑design principles into new features and services.
• Build and maintain a robust security framework for credit and lending operations, ensuring protection against fraud and data breaches.
• Conduct risk assessments and implement mitigation strategies for emerging threats in the fintech landscape.
• Manage relationships with external security vendors, auditors, and regulatory bodies.
• Develop and lead a high‑performing security team, fostering a culture of proactive risk management.
• Support international expansion by aligning security practices with global data protection and financial regulations.
• Stay ahead of cybersecurity trends, advising the executive team on evolving threats and technologies.

Qualifications

Who You Are

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 10+ years of progressive experience in cybersecurity, with at least 5 years in a senior leadership role at a fintech or high‑growth tech company.
• Deep expertise in securing credit and lending platforms, preferably in the fintech industry, with knowledge of fraud prevention, secure payment processing, and regulatory compliance (e.g., Truth in Lending Act, Fair Credit Reporting Act).
• Proven track record in designing and implementing security architectures for cloud‑based systems, APIs, and financial applications.
• Strong understanding of data privacy, encryption, and consumer protection laws in a fintech context.
• Experience leading incident response, penetration testing, and vulnerability management programs.
• Exceptional communication skills, with the ability to explain complex security concepts to non‑technical stakeholders, from engineers to board members.
• Strategic mindset with the ability to balance security rigor with business innovation in a fast‑paced startup environment.

Nice to have

• Experience at a fintech company with exposure to payment processing, lending, or brokerage platforms.
• Familiarity with SOC 2, ISO 27001, or other cybersecurity certifications and frameworks.
• Knowledge of international cybersecurity regulations to support global operations.
• Experience building and scaling security teams in high‑growth environments.

Compensation

Benefits And Perks

• 100% company‑paid medical, dental, and vision coverage for you and your dependents on your first day of employment.
• Monthly fitness reimbursement up to $100 or a full membership to LifeTime Fitness.
• 401(k) with a 2.5% match and immediate vesting.
• Meal program for breakfast, lunch, and dinner.
• Life and accidental insurance.
• Flexible PTO.

We know how to fine‑tune corporate security because we’ve led effective and efficient Fortune 500‑level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.