CISO & Trust Leader for AI-Powered Fintech ERP

Sprites; San Francisco (CA); On-site; USD 230,000 - 360,000; Full time

Job summary

Campfire, an AI-native ERP and financial automation platform, is hiring its first full-time CISO to own security, compliance and customer trust as we sell to larger enterprises.

You will turn that into an in-house program that closes deals faster and keeps us safe. The CISO will lead SOC 1/2 audits, ISO 27001 adoption, privacy governance, and incident response while partnering with Legal, Sales and Engineering. Bay Area preferred for location.

Qualifications

• 10+ years in security, with 3+ leading a program at a B2B SaaS company.
• Has owned SOC 1 / SOC 2 audits end to end. ISO 27001 experience a plus.
• Comfortable on calls with enterprise CIOs and auditors, and enjoys helping close deals.
• Hands-on with AWS, Okta, Google Workspace, EDR and SIEM tooling.
• Working knowledge of GDPR, DPAs and contract security terms.
• Has led real incident response, including customer communication.

Responsibilities

• Lead customer security reviews, deal support, and security collateral.
• Own SOC 1/SOC 2 audits: scope, auditor management, bridge letters.
• Drive ISO 27001 implementation and other frameworks as requested.
• Oversee privacy, DPAs, GDPR mechanisms, and vendor security.
• Own incident response, breach notification decisions, and post-incident reports.
• Manage identity and access, including Okta SSO, MFA, and SCIM integration.
• Maintain resilience policies, BCDR, and incident testing.
• Guide AI security discussions: model governance, prompts retention, logging.

Skills

Security leadership

SOC audits

ISO 27001

AWS security

Okta IAM

GDPR/DPAs

Incident response

SIEM tooling

Fintech/ERP background

Tools

AWS

Okta

Google Workspace

EDR

SIEM

Job description

Campfire, an AI-native ERP and financial automation platform, is hiring its first full-time CISO to own security, compliance and customer trust as we sell to larger enterprises.

You will turn that into an in-house program that closes deals faster and keeps us safe. The CISO will lead SOC 1/2 audits, ISO 27001 adoption, privacy governance, and incident response while partnering with Legal, Sales and Engineering. Bay Area preferred for location.