Chief Information Security Officer

Role Overview

We are looking for a Chief Information Security Officer (CISO) to lead the company’s information security, IT operations, and technical compliance functions.

This role is strategic and hands-on, combining executive-level ownership of security and compliance with operational responsibility for corporate IT. The CISO will ensure the company meets regulatory, audit, and security obligations while enabling the business to scale safely across regulated entities, funds, and tokenized products.

The CISO reports directly to the CEO, with a dotted-line relationship to the CTO / CPO organization, reflecting the strong collaboration required with Product & Engineering.

Scope of Responsibilities

1. Corporate IT Operations & Support

Own and operate the company’s internal IT environment and end-user services across all business units and regulated entities, including:

• Endpoint lifecycle management (laptops, mobile devices, accessories)
• IT onboarding and offboarding processes
• Identity and Access Management (IAM) and RBAC for corporate systems
• Email, productivity, and collaboration tools
• Helpdesk and Tier 1 / Tier 2 support operations
• Software asset management and license compliance
• Endpoint security tooling (EDR, MDM, antivirus, DLP)
• Employee security awareness and phishing training
• IT support for regulatory exams, subpoenas, and information requests

2. Information Security Governance & Risk Management

Define and own the company-wide security framework, policies, and risk posture, including:

• Corporate security policies (acceptable use, access control, incident response, vendor risk, etc.)
• Vendor and third-party risk management programs
• Security incident response governance for corporate systems
• Business continuity and disaster recovery planning (for internal systems)
• Asset inventory, audit logging, and evidence management
• Participation in all material security incidents and retrospectives as part of fundamental risk governance

3. Technical Compliance, Audits & Certifications

Own security-related compliance and act as the primary executive counterpart for audits and regulators, including:

• SOC 1 / SOC 2 readiness and ongoing compliance
• SOX IT controls and coordination with Internal Controls
• DORA readiness and operational resilience requirements
• ISO 27001 or similar certifications (as applicable)
• Regulatory security reporting and remediation management
• Ownership of audit responses, findings, and corrective action plans