Chief Information Security Officer - Enterprise Trust & Compliance

Campfire; San Francisco (CA); On-site; USD 300,000 - 420,000; Full time

Job summary

Campfire is hiring its first full-time CISO to own security, compliance and customer trust as we serve larger enterprises. You will turn an existing security posture into an in-house program, enabling faster deals while keeping operations safe.

The role covers customer security reviews, SOC 1/2 audits, ISO 27001, privacy and contracts, security operations, identity/access, resilience, and AI security. Bay Area preferred, full-time on-site.

Qualifications

• 10+ years in security, with 3+ leading a program at a B2B SaaS company.
• Has owned SOC 1 / SOC 2 audits end to end. ISO 27001 experience a plus.
• Comfortable on calls with enterprise CIOs and auditors, and enjoys helping close deals.
• Hands-on with AWS, Okta, Google Workspace, EDR and SIEM tooling.
• Working knowledge of GDPR, DPAs and contract security terms.
• Has led real incident response, including customer communication.

Responsibilities

• Own security reviews and deal support with customers through Q&A, RFPs and audits.
• Lead SOC 1/2 audits, scope, bridge letters, and auditor management.
• Develop and implement ISO 27001 and related frameworks; maintain Vanta as the control system.
• Oversee privacy, DPAs, GDPR transfers, contracts, and data residency considerations.
• Run incident response planning, tabletop exercises and post-incident analysis.
• Manage identity and access controls (Okta, MFA, SCIM) and security operations.

Skills

Security leadership

B2B SaaS

SOC 1/2 audits

AWS

Okta

GDPR

Incident response

Vendor management

AI security

Compliance frameworks

Tools

SIEM

EDR

Google Workspace

Job description

Campfire is hiring its first full-time CISO to own security, compliance and customer trust as we serve larger enterprises. You will turn an existing security posture into an in-house program, enabling faster deals while keeping operations safe.

The role covers customer security reviews, SOC 1/2 audits, ISO 27001, privacy and contracts, security operations, identity/access, resilience, and AI security. Bay Area preferred, full-time on-site.