Hands-On CISO: Secure & Scale Digital Banking

Varo Bank; New York (NY); On-site; USD 180,000 - 300,000; Full time

Job summary

Varo Bank is seeking a hands-on Chief Information Security Officer (CISO) to lead and scale our cybersecurity program for a digital banking platform serving millions of customers.

The role combines strategic leadership with practical, technical guardrails across cloud security, zero-trust, and DevSecOps. You will bridge threat intelligence, regulatory standards, and product/engineering to protect customer data and money.

Qualifications

• Experience delivering information security in a regulated bank/fintech with OCC/FDIC expectations.
• Hands-on background securing cloud-native infrastructure and modern tech stacks, with DevSecOps practices.
• Deep knowledge of threat landscapes, SOC management, and proactive threat hunting.
• Proven ability to mentor diverse security teams and lead with empathy and transparency.
• Able to translate vulnerabilities and risk metrics into business context for leadership.

Responsibilities

• Design, implement, and monitor Varo's information security program across the org.
• Build and safeguard a cloud-native banking infrastructure with zero-trust and automated protections.
• Oversee threat intelligence, incident response, and risk mitigation activities.
• Align security operations with OCC/FDIC regulatory requirements and other standards.
• Mentor and empower a high-performing security team with a security-first culture.

Skills

Cloud security

DevSecOps

Threat intelligence

Security leadership

Regulatory communication

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM/EDR

Cloud platforms (AWS/Azure/GCP)

Job description

Varo Bank is seeking a hands-on Chief Information Security Officer (CISO) to lead and scale our cybersecurity program for a digital banking platform serving millions of customers.

The role combines strategic leadership with practical, technical guardrails across cloud security, zero-trust, and DevSecOps. You will bridge threat intelligence, regulatory standards, and product/engineering to protect customer data and money.