CISO: Fintech Security Architect & Builder

Cyberjobs; San Francisco (CA); On-site; USD 250,000 - 350,000; Full time

Benefits offered by this job

Competitive salary + equity

High autonomy + ownership culture

Comprehensive health benefits

Downtown SF office

Job summary

Slash is seeking its first Chief Information Security Officer in San Francisco to own security across the company, writing threat models, reviewing architecture, and building a team to scale as we grow.

You will report to the CTO and work with engineering, compliance, legal, risk, and partner banks. This role demands hands-on leadership and the ability to establish a security program across product and infrastructure.

Qualifications

• 10+ years in security, with meaningful time leading security at a fintech, payments company, bank, or crypto company where the stakes were real money.
• Builder's track record building security programs from early stage through hypergrowth.
• Deep technical credibility to explain auth flows and risks to the board in five minutes.
• Hands-on experience with PCI DSS and SOC 2, and with sponsor banks and FFIEC-style examinations.
• Strong cloud security experience, ideally AWS, in fast-moving engineering environments.
• Good judgment balancing security rigor with engineering speed.
• Calm and decisive during incidents.

Responsibilities

• Own Slash's security strategy and program end-to-end, deciding what matters, what to build vs. buy, and what to delay.
• Build and lead the security team, starting with Security Engineering and recruiting engineers.
• Secure a platform that handles real money, including card issuing and payments infrastructure.
• Lead account-security, MFA, session controls, risk collaboration with fraud teams.
• Define permissions, guardrails, auditability, and abuse prevention for AI agents and automation.
• Own cloud/infrastructure security posture across AWS and Cloudflare, including IAM and secrets management.
• Build and run incident response, including playbooks and on-call processes.
• Oversee compliance frameworks and audits (SOC 2 Type II, PCI) and vendor risk management.
• Brief leadership and the board on security risk in clear language.

Skills

Security leadership

Cloud security

PCI DSS / SOC 2

Incident response

Security program build

Board communication

Financial services security

Tools

AWS

Cloudflare

Job description

Slash is seeking its first Chief Information Security Officer in San Francisco to own security across the company, writing threat models, reviewing architecture, and building a team to scale as we grow.

You will report to the CTO and work with engineering, compliance, legal, risk, and partner banks. This role demands hands-on leadership and the ability to establish a security program across product and infrastructure.