Deputy Chief Information Security Officer

Socure; San Francisco, Northern (CA, KY); On-site; USD 250,000 - 450,000; Full time

Job summary

Socure seeks an executive Deputy Chief Information Security Officer to lead company-wide security, data governance, compliance, and risk programs across our fast-scaling organization. You will drive AI and data security initiatives, engage with the Board of Directors, enterprise customers, and legal teams on privacy frameworks, and collaborate on governance across the product lifecycle.

You will present security posture and risk metrics to executive leadership and oversee vendor risk and cloud

Qualifications

• Executive-level security leadership with Board-facing experience.
• Proven track record presenting risk concepts and security strategies.
• Hands-on AI security and governance experience.

Responsibilities

• Drive enterprise security, risk management, and compliance programs.
• Guide AI and data security strategies across product lifecycles.
• Prepare security posture materials for Audit Committees and Board.
• Collaborate with Legal and Risk on privacy and regulatory requirements.
• Engage with customers, auditors, and enterprise partners on security.

Skills

Executive presentation

AI security deployment

Vendor risk management

Customer-facing engagement

Cloud security operations

Education

CISSP

CIPT

FAIR

CRISC

Tools

Okta

CrowdStrike

Job description

Why Socure?

Socure is building the identity trust infrastructure for the digital economy — verifying 100% of good identities in real time and stopping fraud before it starts. The mission is big, the problems are complex, and the impact is felt by businesses, governments, and millions of people every day.

We hire people who want that level of responsibility. People who move fast, think critically, act like owners, and care deeply about solving customer problems with precision. If you want predictability or narrow scope, this won’t be your place. If you want to help build the future of identity with a team that holds a high bar for itself — keep reading.

About the Role

Socure is seeking an experienced, executive-level Deputy Chief Information Security Officer (Deputy CISO) to report directly to the CISO. In this role, you will lead company-wide security, data governance, compliance, and risk programs across our fast-scaling organization.

You will play a critical strategic role driving AI and data security initiatives both internally across the company and externally as a core component of product development. You will regularly engage with executive leadership, the Board of Directors, enterprise customers, and legal teams on emerging AI risks and privacy frameworks.

Key Responsibilities

• Company-Wide Security & Compliance Leadership: Drive, scale, and execute enterprise-wide information security, risk management, and compliance programs aligned with organizational goals and regulatory standards.

• AI & Data Security Strategy: Drive AI and data security initiatives across the company, embedding robust data protection, governance, and threat modeling directly into product development lifecycles.

• Executive & Board Governance: Prepare materials and present security posture, cyber risk metrics, and strategic roadmaps directly to executive staff, the Audit Committee, and the Board of Directors.

• Legal, Privacy & AI Partnership: Collaborate closely with Legal and Risk teams on privacy requirements, AI/ML governance frameworks, regulatory compliance, and technological risk management.

• Customer Assurance & External Audits: Serve as an executive security ambassador, engaging directly with enterprise customers, prospects, and auditors on security architecture, compliance requirements, and audit reviews.

• Vendor & Supply Chain Risk Management: Architect and oversee enterprise Vendor Risk Management (VRM) and software supply chain security programs.

• Enterprise Security Operations: Provide leadership oversight for detection and response, identity and access governance, and cloud-native enterprise security posture.

Minimum Qualifications

• Required Certifications:

  • Certified Information Systems Security Professional (<b>CISSP</b>)

  • Certified Information Privacy Technologist (<b>CIPT</b>)

  • Factor Analysis of Information Risk (<b>FAIR</b>) Certification

  • Certified in Risk and Information Systems Control (<b>CRISC</b>)

• Executive Presentation Experience: Proven track record of presenting complex risk concepts, security strategies, and incident reports to Audit Committees and Board members.

• AI & Security Deployment Track Record: Hands-on experience architecting, evaluating, or deploying AI security solutions and AI safety/governance frameworks.

• Vendor & Supply Chain Security: Extensive experience managing enterprise vendor risk management, third-party compliance, and software supply chain risk.

• Customer-Facing Engagement: High degree of comfort acting as a security representative in high-stakes enterprise customer meetings, sales cycles, and compliance audits.

Preferred Qualifications

• Experience overseeing detection and response operations in modern, cloud-native SaaS environments.

• Deep experience with enterprise security platforms, specifically Okta (Identity & Access Management) and CrowdStrike (EDR/XDR).

• Background working in high-growth technology companies, AI/ML products, or B2B tech sectors.

Socure is an equal opportunity employer that values diversity in all its forms within our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you need an accommodation during any stage of the application or hiring process—including interview or onboarding support—please reach out to your Socure recruiting partner directly.

Follow Us!

YouTube | LinkedIn | X (Twitter) | Facebook