Head of Information Security & Risk Strategy

Cyberjobs; San Francisco (CA); On-site; USD 250,000 - 450,000; Full time

Job summary

Cyberjobs in San Francisco seeks a dynamic Chief Information Security Officer to shape and drive the enterprise security program. You will lead security across AppSec, InfraSec, and GRC, manage vendor risk, and ensure regulatory compliance while partnering with engineering and product teams.

You will report to the executive team, build a world-class team, and communicate security posture to board-level stakeholders. A CISSP and proven leadership are essential.

Qualifications

• 10+ years of cybersecurity experience with 5+ years in leadership roles.
• Deep expertise in SOC 2, ISO 27001 and GDPR compliance.
• CISSP certification required and board-level reporting experience.
• Strong executive communication and strategic thinking.

Responsibilities

• Define and execute enterprise security strategy and roadmap.
• Build and lead security teams across AppSec, InfraSec, and GRC.
• Manage vendor risk assessments and regulatory compliance programs.
• Mentor and develop a high-performing security team.
• Collaborate with engineering, product, and executive leadership to integrate security.
• Develop and implement security policies, procedures, and standards.
• Monitor and report on security metrics and KPIs.
• Identify and mitigate security risks and ensure legal/regulatory compliance.
• Oversee incident response, business continuity, and disaster recovery plans.
• Oversee security budgets and resources to align with business objectives.

Skills

CISSP

Leadership

Governance

Executive reporting

Compliance (SOC 2, ISO 27001, GDPR)

Cybersecurity

Job description

Cyberjobs in San Francisco seeks a dynamic Chief Information Security Officer to shape and drive the enterprise security program. You will lead security across AppSec, InfraSec, and GRC, manage vendor risk, and ensure regulatory compliance while partnering with engineering and product teams.

You will report to the executive team, build a world-class team, and communicate security posture to board-level stakeholders. A CISSP and proven leadership are essential.