CISO New York, NY • Full-time • $250-325K

raincards.xyz; New York (NY); On-site; USD 250,000 - 325,000; Full time

Benefits offered by this job

Unlimited time off

Flexible working

Job summary

Rain is seeking a CISO in New York to lead security governance, risk, and compliance strategies with a core focus on ISO 27001 readiness and certification. You will partner with Engineering, Legal, and Operations to embed robust controls and drive audits and regulatory readiness.

You will own security programs across ISO 27001, SOC 2, vendor risk, and customer security reviews, guiding governance frameworks while communicating risk to executives and the board.

Qualifications

• 8–12+ years in information security, GRC, or security leadership with ownership of compliance programs.
• Hands-on experience leading ISO 27001 certification efforts.
• Experience in fintech/payments or regulated environments.
• Strong understanding of governance, risk management, and control frameworks (ISO 27001/27002, SOC 2, NIST).
• Ability to partner with engineering to implement controls in cloud-native environments.
• Experience managing third-party risk and customer security reviews.
• Ability to communicate risk, tradeoffs, and priorities to executives and non-technical stakeholders.

Responsibilities

• Own and drive Rain’s security governance, risk, and compliance strategy with a focus on ISO 27001 readiness, certification, and maintenance.
• Serve as executive owner for security compliance programs (ISO 27001, SOC 2, vendor risk, customer security reviews).
• Design, implement, and improve security governance framework: policies, standards, risk management processes.
• Partner with Engineering, Infrastructure, Product, Legal, and Operations to embed compliance in workflows.
• Lead external audits, certifications, and assessments with auditors as primary contact.

Skills

Information security

Security leadership

Compliance programs

ISO 27001

SOC 2

GRC

Cloud security

Job description

CISO

New York, NY•Full-time•$250-325K

About the Company

Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world.

You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you’re curious, bold, and excited to help shape a borderless financial future, we’d love to talk.

Our Ethos

We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and to influence our company’s roadmap and vision.

What You’ll Do

As CISO, you will own Rain’s security governance, risk, and compliance strategy, with a particular focus on ISO certification and regulatory readiness, while partnering closely with engineering, infrastructure, legal, and operations teams.

• Own and drive Rain’s information security and compliance strategy, with a primary focus on ISO 27001 (and related standards) readiness, certification, and ongoing maintenance
• Serve as the executive owner for security compliance programs (e.g., ISO 27001, SOC 2, vendor risk, customer security reviews)
• Design, implement, and continuously improve Rain’s security governance framework, including policies, standards, and risk management processes
• Partner closely with Engineering, Infrastructure, Product, Legal, and Operations to embed compliance and security requirements into technical and business workflows
• Lead and manage external audits, certifications, and assessments, acting as the primary point of contact for auditors and assessors
• Translate regulatory, customer, and partner security requirements into practical, scalable controls that align with Rain’s architecture and operating model
• Own the risk management lifecycle, including risk identification, assessment, prioritization, and executive reporting
• Establish and track security and compliance metrics, reporting posture, progress, and risk to executive leadership and the board as needed
• Oversee incident response governance, ensuring policies, playbooks, and escalation paths meet compliance and regulatory expectations

What we’re looking for

• 8–12+ years of experience in information security, GRC, or security leadership roles, with demonstrated ownership of compliance programs
• Hands‑on experience leading ISO 27001 certification efforts (initial certification and/or ongoing surveillance audits)
• Experience operating as a security leader in a high‑growth, technology‑driven company, ideally in fintech, payments, or regulated environments
• Strong understanding of security governance, risk management, and control frameworks (ISO 27001/27002, SOC 2, NIST, etc.)
• Proven ability to partner effectively with engineering and technical teams to implement controls in cloud‑native and application‑driven environmentsExperience managing third‑party risk, customer security questionnaires, and enterprise security reviews
• Ability to clearly communicate risk, tradeoffs, and priorities to executives and non‑technical stakeholders

Nice to have, but not mandatory

• Experience with additional frameworks such as SOC 2 Type II, PCI DSS, ISO 22301, or regional regulatory requirements
• Prior experience acting as a first or early security leader at a scaling company
• Familiarity with cloud security and modern application architectures, even if not hands‑on day‑to‑day
• Experience supporting global customers or international compliance requirements
• Security or compliance certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer / Auditor)
• Experience presenting security posture or risk assessments to boards or executive committees

Things that enable a fulfilling, healthy, and happy experience at Rain:

Unlimited time off Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves.

Flexible working We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they’re their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace.

Easy to access benefits For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan.

Retirement goals Plan for the future with confidence. We offer a 401(k) with a 4% company match.

Equity plan Every Rainmaker gets an equity option plan so we all benefit from our success.

Health and Wellness High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you!

In-office meals Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit.

Team summits Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.

© 2022-2026 Signify Holdings, Inc. “Rain”

Rain is a financial technology company. Rain and its affiliates are not banks, exchanges, or asset custodians. Rain does not provide FDIC insurance or hold deposits.

Payment products are provided in partnership with licensed institutions. Cards are issued through partners licensed in their respective jurisdictions.

Debit cards offered through Rain’s program are Visa® debit cards issued by Cross River Bank, Member FDIC, pursuant to a license from Visa U.S.A. Inc. Rain Products, Inc. is a technology company, not a bank, and serves as program manager.

Banking services are provided by SSB, Member FDIC. Funds deposited at SSB are eligible for FDIC insurance up to $250,000 per depositor, per insured bank, subject to applicable limitations and FDIC rules.

Rewards are issued as part of Rain’s rewards program. Raindrops are loyalty rewards and are not cash, cryptocurrency, or a deposit account. Redemption options and values may vary and are subject to change. Terms apply.

“Rain”, Rain logo mark and “Cover Everything” are registered trademarks of Signify Holdings, Inc.