CISO

Eon; Northern (KY); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Eon is hiring its first Chief Information Security Officer to own security end to end, shaping strategy, building the security program, and representing it to the board and customers. You will partner with Engineering, Product, Sales, and Legal to embed security by design across the SaaS platform and lead incident response when it matters most.

The role requires 10+ years in cybersecurity with 5+ years in senior leadership, and hands-on experience across cloud security, audits, and risk

Qualifications

• 10+ years in cybersecurity, including 5+ years in senior leadership (CISO, VP Security, or Head of Security) at an enterprise SaaS or cloud company.
• Proven track record building and scaling security programs at high-growth startups.
• Deep, hands-on knowledge of cloud, SaaS, infrastructure security, and data protection.
• Direct ownership of SOC 2, ISO 27001, NIST, and FedRAMP programs, including audits and certifications.
• Executive-level communicator—comfortable presenting to boards, executives, and enterprise customers alike.
• Experience recruiting, managing, and developing a security team.
• The judgment and pace to operate as a true owner in a fast-moving, high-growth environment.

Responsibilities

• Define and own Eon's security strategy, roadmap, and budget, briefing the CEO, executive team, and board on posture and investment priorities.
• Build and lead the security function—hiring, structuring, and developing the team as Eon scales.
• Establish security policies, standards, and a risk management framework for a fast-growing SaaS company.
• Own Eon's compliance posture across SOC 2, ISO 27001, NIST, and FedRAMP, including audits and readiness.
• Build an enterprise risk management program including third-party and vendor risk.
• Partner with Product and Engineering to embed secure-by-design principles into the software lifecycle.
• Lead incident response and crisis management and oversee tool evaluation for cloud-native platforms.
• Represent Eon's security program externally to build market trust in the brand.

Skills

Security leadership

Security strategy

Cloud security

Governance & risk

Audits & compliance

Executive communication

Team building

Vendor risk management

Job description

Eon is transforming cloud backups into useful, active assets for the first time. Backed by Sequoia, Lightspeed, Greenoaks, BOND, and Elad Gil, Eon has raised $500M and reached a $4B valuation. Our Cloud Backup and Posture Management (CBPM) platform turns backup data into searchable, accessible, AI-ready assets across every cloud environment our customers run.

As Eon scales, security is becoming a first-class part of who we are - not just a function that supports the business, but a capability our customers trust their most critical data to. We're hiring our first Chief Information Security Officer to expand that capability.

The Role

This is a full-scope, enterprise CISO role. You will own security at Eon end to end: setting the strategy, building and running the internal security program, leading the team that executes it, and representing that program to the board, regulators, and the enterprise customers who depend on us. You'll also be a visible face of security externally - in customer conversations, security reviews, and industry forums.

You'll work as a true executive partner to Engineering, Product, Sales, and Legal, with the autonomy to build Eon's security organization the right way, early, at a company still small enough for that work to define its trajectory.

What You'll Own

Security Strategy & Program Leadership

• Define and own Eon's overall security strategy, roadmap, and budget, briefing the CEO, executive team, and board on posture, risk, and investment priorities.
• Build and lead the security function- hiring, structuring, and developing the team as Eon scales.
• Establish security policies, standards, and a risk management framework that scale with a fast-growing SaaS company.
• Own Eon's compliance posture across SOC 2, ISO 27001, NIST, and FedRAMP, including audit management and continuous readiness.
• Build a formal enterprise risk management program, including third-party and vendor risk.
• Keep policy and controls current with an evolving regulatory and customer compliance landscape.

Security Engineering & Operations

• Partner with Product and Engineering to embed secure-by-design principles into architecture and the software development lifecycle.
• Own detection, response, and vulnerability management, and lead incident response and crisis management when it matters most.
• Evaluate and implement the tooling needed to protect a cloud-native, multi-environment platform.

Customer Trust & Enterprise Growth

• Act as a trusted security advisor to enterprise customers and prospects, supporting security reviews, RFPs, and due diligence.
• Partner with Sales and Solutions Engineering to unblock and accelerate strategic deals.
• Represent Eon's security program externally - with customers, at industry events, and in the broader security community - to build market trust in the Eon brand.

What You Bring

• 10+ years in cybersecurity, including 5+ years in senior security leadership (CISO, VP Security, or Head of Security) at an enterprise SaaS or cloud company (CISO experience at enterprise highly preferred)
• A track record of building and scaling a security program from the ground up, ideally at a high-growth startup.
• Deep, hands-on knowledge of cloud, SaaS, infrastructure security, and data protection.
• Direct ownership of SOC 2, ISO 27001, NIST, and FedRAMP programs, including audits and certifications.
• Proven experience as an executive-level communicator - comfortable presenting to boards, executives, and enterprise customers alike.
• Experience recruiting, managing, and developing a security team.
• The judgment and pace to operate as a true owner in a fast-moving, high-growth environment.

Nice to Have

• Experience with regulated environments and public sector security programs (FedRAMP, StateRAMP).
• Background in cloud infrastructure, data protection, or backup and recovery products.
• Relevant certifications such as CISSP, CISM, or CCSP.
• Experience scaling a security function through hypergrowth (Series C and beyond).

Why Eon

• Build the function: shape Eon's security program and team from day one, with direct visibility to the CEO and board.
• Backed to move fast: $500M raised and a $4B valuation from Sequoia, Lightspeed, Greenoaks, BOND, and Elad Gil.
• High-leverage role: your work directly enables enterprise trust, revenue growth, and Eon's category leadership in cloud data protection.