Сhief Information Security Officer (CISO)

Airtm; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Join a forward-thinking investment fund as a Chief Information Security Officer (CISO) to lead information security and risk management efforts. In this critical role, you will safeguard sensitive data and manage vendor risks while embedding security practices across portfolio companies. You'll design policies, respond to threats, and guide leadership on regulatory risks in the rapidly evolving Web3 space. This is an exciting opportunity to make a significant impact in a global environment focused on innovation and security.

Qualifications

• Proven experience in information security and risk management.
• Strong understanding of compliance with cybersecurity laws.

Responsibilities

• Define and implement information security frameworks for asset protection.
• Conduct periodic threat modeling and risk assessments.

Skills

Information Security

Risk Management

Compliance

Cybersecurity Laws

Vendor Management

Education

Bachelor's Degree in Cybersecurity or related field

Relevant Certifications (CISSP, CISM)

Tools

Penetration Testing Tools

Incident Response Tools

GDPR Compliance Tools

Job description

About us:

cyber•Fund is an investment fund dedicated to partnering with founders from genesis to growth stage and beyond. Our mission is to accelerate the transition to an open cybernetic economy by backing entrepreneurs innovating at the intersection of blockchain, artificial intelligence, robotics, and adjacent technologies.

Since 2014, we have worked with leading crypto teams and actively contributed to projects such as P2P.org, https://nil.foundation/, and https://lido.fi/. We assist with operational and technological decisions, security, and research questions, helping companies go from zero to one.

Role Overview

CyberFund is seeking a crypto-native, strategically minded CISO to lead our information security, compliance, and risk management efforts across a multi-entity structure.

As the CISO, you will be responsible for safeguarding sensitive data, managing vendor risks, and embedding security practices across our portfolio companies, internal operations, and investment infrastructure.

You’ll be hands-on in designing policies, responding to threats, leading audits, and guiding the leadership team on regulatory risks in Web3. This is a mission-critical role for building trust and scaling responsibly in a global, high-stakes environment.

Key responsibilities

Enterprise & operational security

• Define and implement information security frameworks, including asset protection, access control, encryption, and monitoring protocols.
• Oversee security of digital infrastructure across the fund, its subsidiaries, and portfolio companies (wallets, APIs, cloud services, etc.).
• Collaborate with legal, operations, and product teams to ensure GDPR compliance, data protection, and security by design.

Cyber risk management & governance

• Conduct periodic threat modeling, risk assessments, and penetration tests (via external vendors or internal tooling).
• Monitor vulnerabilities and handle incident response (detect, respond, recover).
• Define board-level risk appetite and ensure alignment with operational policies.

Third-party & vendor security

• Build and maintain vendor due diligence processes (for SaaS, custody providers, exchanges, communication tools).
• Lead KYB/KYC security best practices for counterparties and service providers.
• Coordinate with finance and legal teams on security implications in procurement or partnerships.

Compliance & regulatory readiness

• Support global compliance with relevant cybersecurity laws (DORA, GDPR, SEC/ESMA proposals, etc.).
• Ensure audit trail design, access logs, and whistleblower mechanisms are in place.

Wallet & crypto-native infrastructure

• Oversee multi-sig / MPC wallet security, custody integrations, and access control for treasury operations.
• Design procedures for secure token issuance, validator operations, key management, and staking infrastructure.