CISO: ISO 27001 & Regulatory Leader (FinTech)

Rain; New York (NY); On-site; USD 250,000 - 325,000; Full time

Benefits offered by this job

Unlimited time off

Flexible working

Easy to access benefits

Retirement goals

Equity plan

Health and Wellness

In‑office meals

Team summits

Job summary

Rain, the global stablecoin payments platform, seeks a CISO to own security governance, risk, and compliance strategy with a focus on ISO 27001 readiness and certifications. You will partner with engineering, legal, and operations to embed security controls across the tech stack.

You will lead audits, manage third‑party risk, and report risk to executives. A deep background in fintech security and cross‑functional leadership is essential for shaping a borderless financial future.

Qualifications

• 8–12+ years in information security leadership with ownership of compliance programs.
• Hands-on ISO 27001 certification experience.
• Experience in fintech/payments or regulated environments.
• Strong understanding of security governance, risk management, and control frameworks (ISO 27001/27002, SOC 2, NIST, etc.).
• Proven ability to partner with engineering and technical teams to implement controls in cloud‑native environments.
• Experience managing third‑party risk, customer security questionnaires, and enterprise security reviews.
• Ability to clearly communicate risk, tradeoffs, and priorities to executives and non‑technical stakeholders.

Responsibilities

• Own and drive Rain’s security governance and compliance strategy with a focus on ISO 27001 readiness, certification, and ongoing maintenance.
• Serve as the executive owner for security compliance programs (ISO 27001, SOC 2, vendor risk, customer security reviews).
• Design and improve Rain’s security governance framework, including policies, standards, and risk management processes.
• Partner with Engineering, Infrastructure, Product, Legal, and Operations to embed compliance and security requirements.
• Lead and manage external audits, certifications, and assessments, acting as primary contact for auditors.
• Translate regulatory and partner requirements into practical, scalable controls.
• Own the risk management lifecycle and executive reporting.
• Establish and track security metrics and reporting to leadership and the board.
• Oversee incident response governance and ensure policies and playbooks meet regulatory expectations.

Skills

Information security leadership

ISO 27001

GRC

Regulatory compliance

Cloud security governance

Executive communication

Job description

Rain, the global stablecoin payments platform, seeks a CISO to own security governance, risk, and compliance strategy with a focus on ISO 27001 readiness and certifications. You will partner with engineering, legal, and operations to embed security controls across the tech stack.

You will lead audits, manage third‑party risk, and report risk to executives. A deep background in fintech security and cross‑functional leadership is essential for shaping a borderless financial future.