Chief Information Security Officer

Who you are

• Proven experience as a CISO or senior security executive in a high-growth technology or financial services company
• Experience leading security within a US public company or through an IPO, with a strong understanding of SOX, SEC cybersecurity requirements and corporate governance
• Deep technical experience in cryptocurrency, digital assets, blockchain or financial technology
• Demonstrated success leading global Security Engineering & GRC teams
• Strong knowledge of cloud security (GCP and AWS), application security, incident response, identity and access management, and modern security architectures
• Operational experience with self-custody systems (including HSMs), and designing processes to safeguard funds
• Experience presenting to executive leadership, Boards of Directors and regulators
• Strong leadership, communication and stakeholder management skills, with the ability to balance security, innovation and business growth

What the job involves

• Blockchain.com is looking for an experienced Chief Information Security Officer (CISO) to lead our global cyber security organization as we continue to scale and prepare for our next phase of growth, including our journey toward becoming a US public company
• Reporting to the CTO, the CISO will define and execute the company's global cybersecurity strategy, ensuring the security, resilience and integrity of our platform while enabling rapid product innovation. This executive will be a trusted advisor to the leadership team and Board, partnering closely with Engineering, Product, Infrastructure, Legal, Compliance and Finance
• The CISO will oversee the Security Engineering, Security Operations and Security GRC teams and collaborate closely with IT, SRE and the broader engineering team
• Define and execute Blockchain.com's global cybersecurity strategy aligned with business objectives and IPO readiness
• Foster a culture of security across the company by being a strong business-enabler
• Lead and scale the Security Engineering, SOC and Security GRC organizations
• Partner with executive leadership and the internal audit team on cybersecurity strategy, enterprise risk and regulatory readiness
• Strengthen our cloud, application and infrastructure security across a global digital asset platform
• Devise robust operational flows & technical systems to safeguard client and company funds
• Drive incident response, security operations, vulnerability management and operational resilience
• Devise and implement a comprehensive AI governance & safety strategy
• Maintain and play a role in operating our custody systems
• Provide tailored, executive-level security assessments to Board meetings, regulators, and examiners to demonstrate operational resilience and risk mitigation effectiveness
• Ensure compliance with industry standards and frameworks, including SOC 1/2, ISO 2700, ISO 42001, DoRA, SOX and other applicable regulatory requirements
• Embed security into the software development lifecycle while enabling engineering velocity

Benefits

• Meaningful Equity
• Crypto Bonus
• HealthCare
• Paid Family Leave
• Get the equipment you need
• Unlimited Vacation
• Remote-first
• Offsites