Remote CISO: AI-Driven Security Leader

Job4Travelers; Chicago (IL); Remote; USD 150,000 - 350,000; Full time

Benefits offered by this job

Fully remote, globally distributed

Competitive compensation package

Travel offsites to exotic locations

Job summary

Catalyst Capital is hiring its first Chief Information Security Officer to own security across every brand in the group. You will set strategy, build the program, and personally run responses when needed.

The role blends core CISO work with AI-driven security, including building an attack-surface map and agentic systems. It is a player-coach role with a small, fully remote team across time zones.

Qualifications

• 10+ years in security, including leadership roles at scale.
• Led live incident response and coordinated executives during incidents.
• Built or rebuilt security programs with strategy, policy, tooling and IR.
• AI-native operator with daily use of AI for security tasks.
• Deep knowledge of AI risks and prompt-injection defense is beneficial.

Responsibilities

• Define security strategy, roadmap and budget across multiple brands.
• Own incident response end-to-end, lead IR during live incidents and run postmortems.
• Manage cloud security, identity and access administration and baseline AWS security.
• Assess third-party/vendor risk and ensure required audits/attestations.
• Set login protection standards and collaborate with engineering on implementations.
• Lead phishing defense, staff training and impersonation protection.
• Write and enforce policies, preparing the company for SOC 2/ISO 27001.
• Lead a small, distant security team and balance in-house vs outsourced work.
• Develop member security content and coordinate with Legal/Compliance.

Skills

Incident response

Cloud security

IAM / MFA

Vendor risk

AI security

Team leadership

Executive briefing

Policy & compliance

Threat modeling

Security strategy

Tools

SIEM

AWS security

Endpoint protection

Identity management

Job description

Catalyst Capital is hiring its first Chief Information Security Officer to own security across every brand in the group. You will set strategy, build the program, and personally run responses when needed.

The role blends core CISO work with AI-driven security, including building an attack-surface map and agentic systems. It is a player-coach role with a small, fully remote team across time zones.