CISO — Investor-Grade Security Leader for Digital Infra

Tract Capital Management; Denver (CO); On-site; USD 275,000 - 300,000; Full time

Benefits offered by this job

100% employer-covered medical, dental,

401K with matching

Unlimited PTO

Job summary

Tract Capital Management seeks a senior CISO to shape and govern enterprise information security across its investment platforms, ensuring regulatory alignment and risk controls. The role requires hands-on leadership across IT, OT, and vendor ecosystems, with strong collaboration with legal and finance teams.

You will drive ISO 27001, ISO 42001 AI governance, and SIEM/Vendor risk programs while reporting to the CIO and communicating security posture to investors and stewards of capital.

Qualifications

• Bachelor-level degree in information security, CS, engineering or related field.
• 10+ years of progressive information security experience with senior leadership roles.
• Experience building security programs across multi-entity structures (private equity/asset management).
• Deep knowledge of ISO 27001, NIST 800-53, SOC 2 Type II and audit processes.
• Proven ability to communicate security posture to boards and investors.

Responsibilities

• Lead enterprise information security governance across multiple entities and funds.
• Own ISO 27001 certification program and AI governance initiatives (ISO 42001).
• Oversee third-party risk management and vendor security assessments.
• Coordinate with Legal, Finance and Investor Relations for due diligence responses.
• Develop and maintain incident response, disaster recovery, and training programs.

Skills

InfoSec leadership

ISO 27001

NIST 800-53

SOC 2 Type II

GDPR/CCPA

Vendor risk mgmt

Investor relations

Education

Bachelor's degree in Information Security/CS/Engineering

MBA (preferred)

Certifications: CISSP/CISM/CISA/CRISC (preferred)

Tools

Microsoft 365 security stack

Entra ID

Purview

Defender XDR

Job description

Tract Capital Management seeks a senior CISO to shape and govern enterprise information security across its investment platforms, ensuring regulatory alignment and risk controls. The role requires hands-on leadership across IT, OT, and vendor ecosystems, with strong collaboration with legal and finance teams.

You will drive ISO 27001, ISO 42001 AI governance, and SIEM/Vendor risk programs while reporting to the CIO and communicating security posture to investors and stewards of capital.