Chief Information Security Officer

About the Role

We are searching for our first Chief Information Security Officer (CISO) to define, build, and own cybersecurity across our company and product landscape. This executive will operate at the intersection of deep technical design, executive leadership, and product strategy, with full ownership of security outcomes.

Responsibilities

• Security Architecture: Establish the security model for decentralized, on-device AI systems and enterprise technology
• Define trust boundaries, identity frameworks, and data protection strategies
• Lead threat modeling for edge, distributed, and AI-driven environments
• Promote a culture to ensure security is embedded into system design, not layered on
• Product & AI Security: Integrate security into the software and ML lifecycle (SDLC + MLOps)
• Define safeguards and validation measures for model integrity, adversarial attacks, data poisoning, and emergent AI/ML threats
• Partner with engineering to build secure-by-default product capabilities
• Make security a core product feature, not just an internal function
• Infrastructure & Platform Security: Own security across cloud, hybrid, and edge/on-device environments
• Establish controls to protect confidentiality, integrity, availability, and privacy for data, identity, access, networking, and distributed systems
• Secure deployments, firmware, and update mechanisms across all deployment models (device-level, on-premises, cloud, hybrid)
• Develop, operate, and maintain a cybersecurity risk assessment and vulnerability management program
• Mitigate supply chain and third-party risks and vulnerabilities
• Risk, Governance & Trust Frameworks: Define, operate, and report on a modern cybersecurity risk management program aligned to AI, privacy, and data sovereignty
• Coordinate and integrate cybersecurity risk with broader enterprise risk management activities
• Lead compliance and certifications where necessary
• Translate complex risk into clear business and technical decisions
• Detection, Response & Resilience: Build for the detection, containment, eradication, and recovery from cybersecurity threats and related incidents across centralized and edge environments
• Lead crisis response and executive communication during incidents
• Ensure systems are designed for resilience and recovery, not just prevention
• Executive Team: Act as a strategic advisor on security, risk, and product decisions
• Provide clear, actionable reporting to other members of c-suite
• Influence company direction and investment priorities
• Work with executive leadership to clearly define and support organizational security & privacy goals
• External Trust & Market Position: Promote a culture of cybersecurity awareness and mindedness among the company’s c-suite, management, personnel, contractors, vendors, suppliers, and partners
• Represent the company’s security posture to customers, partners, and regulators
• Help define how trust, privacy, and sovereignty are communicated and delivered
• Build credibility in the market as a security-first AI organization

Requirements

• 15+ years of experience working within cybersecurity
• 10+ years of experience as a CISO or senior security leader in a high-growth, deeply technical environment
• Track record of building and scaling security programs from early or mid-stage environments
• Background in product and platform security, beyond enterprise IT security
• Experience with cloud infrastructure, distributed systems, and modern architectures
• Strong understanding of distributed systems, edge computing, application / infrastructure security and adversarial thinking
• Familiarity with AI/ML security (e.g., model integrity, data poisoning, adversarial attacks)
• Deep technical literacy and ability to coach others on delivery best practices
• Strong communication skills—able to navigate technical and non-technical discussions
• Highly adaptable and comfortable working with evolving processes and priorities
• Ability to work with imperfect systems and incrementally improve them over time rather than striving for immediate perfection

Qualifications

Recommended certifications include (ISC2) CISSP, (ISC2) ISSMP, GIAC GSTRT, SANS CISO, or other certification in software security, such as (ISC2) CSSLP.

Benefits

• Competitive salary
• Comprehensive health, dental, and vision benefits package
• 401(k) match
• Equity options
• $200/month Health & Wellness stipend
• Continuing Education support
• $500/year Function Health subscription
• Free parking for in-office employees
• Flexible Time Off (FTO)
• Parental leave for eligible employees
• Supplemental life insurance