PLEASE NOTE THIS IS AN EQUITY-ONLY ROLE AND THE INTERVIEWS WILL COMMENCE IN FEBRUARY 2025.
Stealth-Mode Start-Up Client is seeking an experienced Chief Information Security Officer (CISO) to establish, implement, and oversee the cybersecurity strategy for an innovative digital platform .
This role will focus on securing user data, financial transactions, and proprietary assets while ensuring compliance with international data protection standards and financial regulations.
The CISO will collaborate with leadership and technical teams to design a robust cybersecurity infrastructure , identify vulnerabilities, and ensure risk mitigation across all layers of the platform.
To apply, please provide a CV, your compensation requirements (including salary expectations for when funding is secured) and a cover letter/note that explains why you are interested and how you meet the requirements.
Please note that submissions received without all the requested information will be automatically disqualified and rejected.
Key Responsibilities: Develop and implement a comprehensive cybersecurity strategy , aligning it with the platform's business objectives and regulatory requirements.
Identify, evaluate, and mitigate cybersecurity risks , ensuring platform resilience against external and internal threats.
Ensure compliance with GDPR, PCI-DSS, ISO 27001 , and other global data privacy and security standards.
Create and oversee an incident response plan , ensuring swift action during breaches or vulnerabilities.
Collaborate with Blockchain Developers to secure blockchain-based financial transactions and token operations .
Work closely with DevOps Engineers to implement cloud security best practices across AWS, GCP, or Azure environments.
Oversee multi-factor authentication (MFA) and age verification systems to protect user accounts and ensure platform compliance.
Conduct regular vulnerability assessments, penetration tests , and security audits to identify and address weaknesses.
Build and lead a dedicated cybersecurity team , fostering a culture of security awareness across the organization.
Develop and deliver cybersecurity training programs for employees, ensuring best practices are adopted across all teams.
Work cross-functionally with engineering, legal, and product teams to ensure security measures are embedded into all processes and tools.
Requirements: Minimum 10 years in cybersecurity leadership roles , with a proven track record of managing large-scale security operations.
Relevant certifications such as CISSP, CISM, CISA, CEH , or equivalent are highly preferred.
Excellent command of the English Language in all forms.
Previous start-up experience would be an advantage.
Deep knowledge of network security, application security, encryption protocols , and blockchain security frameworks .
Strong understanding of international data security regulations ( GDPR, PCI-DSS, ISO 27001 ).
Experience securing blockchain-based systems , including smart contract auditing and token operations security .
Proven expertise in cybersecurity incident detection, response, and recovery protocols .
Proficiency in cloud security tools and best practices for AWS, GCP, or Azure.
Strong ability to assess threats, analyze vulnerabilities, and develop risk mitigation strategies.
Ability to build, mentor, and lead high-performing security teams.
Excellent communication skills for presenting technical risks and strategies to non-technical stakeholders.
Ideal Candidate Profile: A proactive cybersecurity leader with a passion for creating safe and resilient digital environments.
Someone with a hacker mindset who can think creatively to anticipate and prevent threats.
Committed to maintaining trust, transparency, and user safety at every level of the platform.
Skilled at working cross-functionally in a dynamic, startup environment with evolving priorities.
Continuously stays updated with emerging cybersecurity trends and technologies.
Compensation & Benefits Equity-only at present, to transition to a salaried, full-time permanent position when funding is secured.
Remote and flexible working arrangements, the opportunity to be part of something potentially epic with potential opportunities for global travel, and access to industry conferences and workshops in due course.