Hands-On FinTech CISO: Cloud Security & Threat Intel

Neara; San Francisco (CA); On-site; USD 260,000 - 520,000; Full time

Job summary

Varo Bank seeks a hands-on Chief Information Security Officer (CISO) to lead and scale a secure digital banking platform serving millions of customers. You will bridge executive strategy with technical architecture, shaping a proactive security stance across cloud infrastructure and product development.

This role demands deep cloud security expertise, threat intelligence leadership, and the ability to communicate risk to the CEO, board, and regulators.

Qualifications

• Experience in regulated banks or financial services with OCC/FDIC expectations.
• Hands-on practitioner with knowledge of cloud security architectures, modern infra, and automated DevSecOps pipelines.
• Deep knowledge of threat landscapes, SOC management, and proactive threat hunting.
• Proven ability to build, mentor, and lead diverse security teams with empathy and transparency.
• Ability to translate complex vulnerabilities and risk metrics for executive leadership.

Responsibilities

• Lead hands-on design, implementation, and monitoring of the information security program.
• Secure a cloud-native banking infrastructure with zero-trust and automated threat protection.
• Oversee threat monitoring, incident response, and risk mitigation efforts.
• Ensure compliance alignment with OCC/FDIC and federal banking regulators.
• Mentor and empower a security team while embedding a security-first mindset across product/engineering.

Skills

Banking & Fintech

Cloud security

Threat intelligence

Inclusive leadership

Strategic communications

Tools

Cloud security

DevSecOps

Job description

Varo Bank seeks a hands-on Chief Information Security Officer (CISO) to lead and scale a secure digital banking platform serving millions of customers. You will bridge executive strategy with technical architecture, shaping a proactive security stance across cloud infrastructure and product development.

This role demands deep cloud security expertise, threat intelligence leadership, and the ability to communicate risk to the CEO, board, and regulators.