CISO

Eon.io; United States; On-site; USD 250,000 - 360,000; Full time

Job summary

Eon.io is seeking a Chief Information Security Officer to own security end-to-end, including strategy, program leadership, and external representation. You will partner with Engineering, Product, Sales, and Legal to build a security organization that scales with growth and protects customer data across cloud environments.

The role requires senior leadership experience, hands-on cloud security expertise, and a track record of guiding security programs through regulatory audits and industry

Qualifications

• 10+ years in cybersecurity, with 5+ years in senior security leadership at an enterprise SaaS or cloud company
• Proven track record building and scaling a security program
• Deep knowledge of cloud, SaaS, infrastructure security, and data protection
• Experience with SOC 2, ISO 27001, NIST, and FedRAMP audits and certifications

Responsibilities

• Define and own Eon's security strategy, roadmap, and budget for executive visibility
• Build and lead the security function, including hiring and structuring the team
• Embed secure-by-design principles into product and development lifecycle, and manage detection, response, and vulnerability programs

Skills

Cybersecurity leadership

Security strategy

Cloud security

Regulatory compliance

Executive communication

Job description

Eon is transforming cloud backups into useful, active assets for the first time. Backed by Sequoia, Lightspeed, Greenoaks, BOND, and Elad Gil, Eon has raised $500M and reached a $4B valuation. Our Cloud Backup and Posture Management (CBPM) platform turns backup data into searchable, accessible, AI-ready assets across every cloud environment our customers run.

As Eon scales, security is becoming a first-class part of who we are — not just a function that supports the business, but a capability our customers trust their most critical data to. We're hiring our first Chief Information Security Officer to expand that capability.

The Role

This is a full-scope, enterprise CISO role. You will own security at Eon end to end: setting the strategy, building and running the internal security program, leading the team that executes it, and representing that program to the board, regulators, and the enterprise customers who depend on us. You'll also be a visible face of security externally — in customer conversations, security reviews, and industry forums.

You'll work as a true executive partner to Engineering, Product, Sales, and Legal, with the autonomy to build Eon's security organization the right way, early, at a company still small enough for that work to define its trajectory.

What You'll Own

Security Strategy & Program Leadership

• Define and own Eon's overall security strategy, roadmap, and budget, briefing the CEO, executive team, and board on posture, risk, and investment priorities.
• Build and lead the security function— hiring, structuring, and developing the team as Eon scales.
• Establish security policies, standards, and a risk management framework that scale with a fast-growing SaaS company.

Governance, Risk & Compliance

• Own Eon's compliance posture across SOC 2, ISO 27001, NIST, and FedRAMP, including audit management and continuous readiness.
• Build a formal enterprise risk management program, including third-party and vendor risk.
• Keep policy and controls current with an evolving regulatory and customer compliance landscape.

Security Engineering & Operations

• Partner with Product and Engineering to embed secure-by-design principles into architecture and the software development lifecycle.
• Own detection, response, and vulnerability management, and lead incident response and crisis management when it matters most.
• Evaluate and implement the tooling needed to protect a cloud-native, multi-environment platform.

Customer Trust & Enterprise Growth

• Act as a trusted security advisor to enterprise customers and prospects, supporting security reviews, RFPs, and due diligence.
• Partner with Sales and Solutions Engineering to unblock and accelerate strategic deals.
• Represent Eon's security program externally — with customers, at industry events, and in the broader security community — to build market trust in the Eon brand.

What You Bring

• 10+ years in cybersecurity, including 5+ years in senior security leadership (CISO, VP Security, or Head of Security) at an enterprise SaaS or cloud company (CISO experience at enterprise highly preferred)
• A track record of building and scaling a security program from the ground up, ideally at a high-growth startup.
• Deep, hands‑on knowledge of cloud, SaaS, infrastructure security, and data protection.
• Direct ownership of SOC 2, ISO 27001, NIST, and FedRAMP programs, including audits and certifications.
• Proven experience as an executive‑level communicator — comfortable presenting to boards, executives, and enterprise customers alike.
• Experience recruiting, managing, and developing a security team.
• The judgment and pace to operate as a true owner in a fast-moving, high-growth environment.

Nice to Have

• Experience with regulated environments and public sector security programs (FedRAMP, StateRAMP).
• Background in cloud infrastructure, data protection, or backup and recovery products.
• Relevant certifications such as CISSP, CISM, or CCSP.
• Experience scaling a security function through hypergrowth (Series C and beyond).

Why Eon

• Build the function: shape Eon's security program and team from day one, with direct visibility to the CEO and board.
• Backed to move fast: $500M raised and a $4B valuation from Sequoia, Lightspeed, Greenoaks, BOND, and Elad Gil.
• High‑leverage role: your work directly enables enterprise trust, revenue growth, and Eon's category leadership in cloud data protection.