The Security Executive Council
About the job Job Summary The VP, Cyber and CISO (Chief Information Security Officer) is responsible for establishing, implementing, monitoring and enforcing a corporate-wide information security management program to help ensure that information assets are protected. This position is responsible for proactively identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the company. The CISO has responsibility for building an accountable, information security-conscious culture and a system security infrastructure built on high quality standards backed-up by effective operational procedures and overseen by a security governance program. Essential Functions Program Leadership Responsible for the strategic leadership of the information security program. Develops, implements and monitors a strategic, comprehensive enterprise information security program to ensure that the integrity, confidentiality and availability of information that is owned, controlled or processed by the organization. Leads the Cybersecurity compliance activities that enable the business to become and remain compliant with various regulatory programs to include PCI, GDPR, and CCPA. Facilitates information security governance through the implementation of a governance program. Establishes annual and long-range security and compliance goals, defines security strategies, metrics, reporting mechanisms and program services; and creates a roadmap for continual program improvements. Provides regular and consistent reporting on the current status of the information security program to senior business leaders. Develops and oversees effective business continuity and disaster recovery policies and standards to align with enterprise business continuity management program goals. Coordinate the development of implementation plans and procedures to ensure that business-critical services are recovered in the event of a security event. Develops and enhances an information security management and control framework based on appropriate information security industry standards to measure the efficiency and effectiveness of the program, facilitates appropriate resource allocation, and increases the maturity of the security. Risk Management and Incident Response Keeps abreast of security incidents and acts as primary control point during significant information security incidents. Convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidences that arise. Manages security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation. Defines and facilitates the information security risk assessment process, including the reporting and oversight of treatment efforts to address findings. Develops, implements and administers technical security standards, as well as a suite of security services and tools to address and mitigate security risk. Provides leadership, direction and guidance in assessing and evaluating information security risks and monitors compliance with security standards and appropriate policies. Creates a framework for roles and responsibilities regarding information ownership, classification, accountability and protection. Examines impacts of new technologies on the company's overall information security. Establishes processes to review implementation of new technologies to ensure security compliance. Policy, Compliance and Audit Develops, maintains and publishes up-to-date information security policies, standards and guidelines. Oversees the approval, training, and dissemination of security policies and practices. Leads efforts to internally assess, evaluate and make recommendations to management regarding the adequacy of the security controls for the information technology systems. Works with Internal Audit and outside consultants as appropriate on required security assessments and audits. Ensures that security programs follow relevant laws, regulations and policies to minimize risk and audit findings. Provides guidance, evaluation and advocacy on audit responses. Outreach, Education and Training Creates education and awareness programs and advises departments on all levels on security issues, best practices, and vulnerabilities. Pursues security initiatives to address unique needs in protecting identity theft, mobile social media security and online reputation program. Monitors the external threat environment for emerging threats and advises relevant stakeholders on the appropriate courses of action. Coordinates information security projects with resources from IT and business unit teams. Builds and Directs a High Functioning Team (Directors, VPs, and Presidents) Holds others accountable for conducting business in a legal and ethical manner while complying with policies, laws, and regulations related to business and employment. Oversees people processes and programs across the team to ensure talent for current and future needs by providing operational, functional, and technical leadership. Attracts, retains, and develops highly effective professionals and support staff. Cultivates a bench of leadership and talent to deliver results and support future growth. Determines work methods and directs the work of associates. Drives the establishment of performance goals and provides on-going feedback, coaching, and development to enhance the team's performance and capability, to facilitate open communication, and to encourage continuous performance improvement. Evaluates and determines the hiring, promotion, salary recommendations, and all employment-related decisions. Identifies individual and team skill gaps, developmental areas, and opportunities (e.g., training, special assignments, projects, etc.) to advance individual and team capability. Recognizes initiative, innovation, and work well done to create a positive work environment of excellence. Qualifications: Bachelor's Degree, Information Systems or related discipline, Required Work Experience 15+ years of experience in information technology, Required 5+ years of experience in Information Security Operations Management, Required Skills Knowledge of security standards: ISO, NIST Knowledge of current compliance requirements (e.g, SOX, PCI, GDPR, CCPA etc.); Ability to understand, analyze, and interpret complex legal, regulatory, and IT-related documents Ability to communicate complex, technical concepts to executive team, business leaders and technical Ability to develop and maintain positive business relationships and foster an environment of mutual respect, understanding, trust, and support Ability to facilitate the resolution of different views Ability to assess situations, provide counsel, and identify solutions that resolve disputes/issues, while considering the best interests of all parties; to develop and implement short and long-term solutions; and to apply effective problem solving and decision-making to address business needs and issues Ability to adapt and adjust planned work through analyzing work demands, competing priorities, and tight deadlines; to understand the most effective and efficient means to accomplish tasks within the parameters of the organizational structure, processes, systems, and policies Ability to exercise judgment and discretion in dealing with matters of significance and sensitive nature Certifications Certified Information Systems Security Professional (CISSP), Preferred Certified in Risk and Information Systems Control (CRISC), Preferred Certified Information Security Manager (CISM), Preferred Certified in the Governance of Enterprise IT (CGEIT), Preferred Certified Data Privacy Solutions Engineer (CDPSE), Preferred Certified Information Systems Auditor (CISA), Preferred Travel Requirement May be required to travel up to 25% of the time
About the job Job Summary The VP, Cyber and CISO (Chief Information Security Officer) is responsible for establishing, implementing, monitoring and enforcing a corporate-wide information security management program to help ensure that information assets are protected. This position is responsible for proactively identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the company. The CISO has responsibility for building an accountable, information security-conscious culture and a system security infrastructure built on high quality standards backed-up by effective operational procedures and overseen by a security governance program. Essential Functions Program Leadership Responsible for the strategic leadership of the information security program. Develops, implements and monitors a strategic, comprehensive enterprise information security program to ensure that the integrity, confidentiality and availability of information that is owned, controlled or processed by the organization. Leads the Cybersecurity compliance activities that enable the business to become and remain compliant with various regulatory programs to include PCI, GDPR, and CCPA. Facilitates information security governance through the implementation of a governance program. Establishes annual and long-range security and compliance goals, defines security strategies, metrics, reporting mechanisms and program services; and creates a roadmap for continual program improvements. Provides regular and consistent reporting on the current status of the information security program to senior business leaders. Develops and oversees effective business continuity and disaster recovery policies and standards to align with enterprise business continuity management program goals. Coordinate the development of implementation plans and procedures to ensure that business-critical services are recovered in the event of a security event. Develops and enhances an information security management and control framework based on appropriate information security industry standards to measure the efficiency and effectiveness of the program, facilitates appropriate resource allocation, and increases the maturity of the security. Risk Management and Incident Response Keeps abreast of security incidents and acts as primary control point during significant information security incidents. Convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidences that arise. Manages security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation. Defines and facilitates the information security risk assessment process, including the reporting and oversight of treatment efforts to address findings. Develops, implements and administers technical security standards, as well as a suite of security services and tools to address and mitigate security risk. Provides leadership, direction and guidance in assessing and evaluating information security risks and monitors compliance with security standards and appropriate policies. Creates a framework for roles and responsibilities regarding information ownership, classification, accountability and protection. Examines impacts of new technologies on the company's overall information security. Establishes processes to review implementation of new technologies to ensure security compliance. Policy, Compliance and Audit Develops, maintains and publishes up-to-date information security policies, standards and guidelines. Oversees the approval, training, and dissemination of security policies and practices. Leads efforts to internally assess, evaluate and make recommendations to management regarding the adequacy of the security controls for the information technology systems. Works with Internal Audit and outside consultants as appropriate on required security assessments and audits. Ensures that security programs follow relevant laws, regulations and policies to minimize risk and audit findings. Provides guidance, evaluation and advocacy on audit responses. Outreach, Education and Training Creates education and awareness programs and advises departments on all levels on security issues, best practices, and vulnerabilities. Pursues security initiatives to address unique needs in protecting identity theft, mobile social media security and online reputation program. Monitors the external threat environment for emerging threats and advises relevant stakeholders on the appropriate courses of action. Coordinates information security projects with resources from IT and business unit teams. Builds and Directs a High Functioning Team (Directors, VPs, and Presidents) Holds others accountable for conducting business in a legal and ethical manner while complying with policies, laws, and regulations related to business and employment. Oversees people processes and programs across the team to ensure talent for current and future needs by providing operational, functional, and technical leadership. Attracts, retains, and develops highly effective professionals and support staff. Cultivates a bench of leadership and talent to deliver results and support future growth. Determines work methods and directs the work of associates. Drives the establishment of performance goals and provides on-going feedback, coaching, and development to enhance the team's performance and capability, to facilitate open communication, and to encourage continuous performance improvement. Evaluates and determines the hiring, promotion, salary recommendations, and all employment-related decisions. Identifies individual and team skill gaps, developmental areas, and opportunities (e.g., training, special assignments, projects, etc.) to advance individual and team capability. Recognizes initiative, innovation, and work well done to create a positive work environment of excellence. Qualifications: Bachelor's Degree, Information Systems or related discipline, Required Work Experience 15+ years of experience in information technology, Required 5+ years of experience in Information Security Operations Management, Required Skills Knowledge of security standards: ISO, NIST Knowledge of current compliance requirements (e.g, SOX, PCI, GDPR, CCPA etc.); Ability to understand, analyze, and interpret complex legal, regulatory, and IT-related documents Ability to communicate complex, technical concepts to executive team, business leaders and technical Ability to develop and maintain positive business relationships and foster an environment of mutual respect, understanding, trust, and support Ability to facilitate the resolution of different views Ability to assess situations, provide counsel, and identify solutions that resolve disputes/issues, while considering the best interests of all parties; to develop and implement short and long-term solutions; and to apply effective problem solving and decision-making to address business needs and issues Ability to adapt and adjust planned work through analyzing work demands, competing priorities, and tight deadlines; to understand the most effective and efficient means to accomplish tasks within the parameters of the organizational structure, processes, systems, and policies Ability to exercise judgment and discretion in dealing with matters of significance and sensitive nature Certifications Certified Information Systems Security Professional (CISSP), Preferred Certified in Risk and Information Systems Control (CRISC), Preferred Certified Information Security Manager (CISM), Preferred Certified in the Governance of Enterprise IT (CGEIT), Preferred Certified Data Privacy Solutions Engineer (CDPSE), Preferred Certified Information Systems Auditor (CISA), Preferred Travel Requirement May be required to travel up to 25% of the time
The Security Executive Council
San Francisco, California
About the job Company Credit Genie is a mobile first financial wellness platform designed to help individuals take control of their financial future. We leverage artificial intelligence to provide personalized insights and are building a financial ecosystem by offering tools and services that provide instant access to cash and building credit. Our goal is to empower every customer to achieve long term financial stability. Founded in 2019 by Ed Harycki, former Swift Capital Founder (acquired by PayPal in 2017). Backed by Khosla Ventures and led by industry pioneers from companies such as PayPal, Square, and Cash App, we are well positioned to build the future of inclusive finance through cutting edge technology and customer centric solutions. Overview As Chief Information Security Officer (CISO), you will be the primary leader responsible for developing and implementing our information security strategy. You'll protect our systems, data, and customer trust by overseeing cybersecurity operations, ensuring compliance with regulatory standards, and mitigating risks in a dynamic fintech environment. This role demands a visionary leader with deep expertise in cybersecurity, preferably in fintech, and a passion for securing innovative financial products. What You'll Do Develop and execute a comprehensive cybersecurity strategy to protect our platform, customer data, and intellectual property. Ensure compliance with fintech and data privacy regulations, including GDPR, CCPA, PCI DSS, and other relevant standards. Oversee the design, implementation, and monitoring of security controls for payment processing, lending platforms, and other financial products. Lead incident response, including managing and mitigating cybersecurity breaches, vulnerabilities, and regulatory inquiries. Collaborate with product, engineering, and compliance teams to embed security by design principles into new features and services. Build and maintain a robust security framework for credit and lending operations, ensuring protection against fraud and data breaches. Conduct risk assessments and implement mitigation strategies for emerging threats in the fintech landscape. Manage relationships with external security vendors, auditors, and regulatory bodies. Develop and lead a high performing security team, fostering a culture of proactive risk management. Support international expansion by aligning security practices with global data protection and financial regulations. Stay ahead of cybersecurity trends, advising the executive team on evolving threats and technologies. Qualifications Who You Are Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field. 10+ years of progressive experience in cybersecurity, with at least 5 years in a senior leadership role at a fintech or high growth tech company. Deep expertise in securing credit and lending platforms, preferably in the fintech industry, with knowledge of fraud prevention, secure payment processing, and regulatory compliance (e.g., Truth in Lending Act, Fair Credit Reporting Act). Proven track record in designing and implementing security architectures for cloud based systems, APIs, and financial applications. Strong understanding of data privacy, encryption, and consumer protection laws in a fintech context. Experience leading incident response, penetration testing, and vulnerability management programs. Exceptional communication skills, with the ability to explain complex security concepts to non technical stakeholders, from engineers to board members. Strategic mindset with the ability to balance security rigor with business innovation in a fast paced startup environment. Nice to have Experience at a fintech company with exposure to payment processing, lending, or brokerage platforms. Familiarity with SOC 2, ISO 27001, or other cybersecurity certifications and frameworks. Knowledge of international cybersecurity regulations to support global operations. Experience building and scaling security teams in high growth environments. Compensation Benefits And Perks 100% company paid medical, dental, and vision coverage for you and your dependents on your first day of employment. Monthly fitness reimbursement up to $100 or a full membership to LifeTime Fitness. 401(k) with a 2.5% match and immediate vesting. Meal program for breakfast, lunch, and dinner. Life and accidental insurance. Flexible PTO. We know how to fine tune corporate security because we've led effective and efficient Fortune 500 level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.
About the job Company Credit Genie is a mobile first financial wellness platform designed to help individuals take control of their financial future. We leverage artificial intelligence to provide personalized insights and are building a financial ecosystem by offering tools and services that provide instant access to cash and building credit. Our goal is to empower every customer to achieve long term financial stability. Founded in 2019 by Ed Harycki, former Swift Capital Founder (acquired by PayPal in 2017). Backed by Khosla Ventures and led by industry pioneers from companies such as PayPal, Square, and Cash App, we are well positioned to build the future of inclusive finance through cutting edge technology and customer centric solutions. Overview As Chief Information Security Officer (CISO), you will be the primary leader responsible for developing and implementing our information security strategy. You'll protect our systems, data, and customer trust by overseeing cybersecurity operations, ensuring compliance with regulatory standards, and mitigating risks in a dynamic fintech environment. This role demands a visionary leader with deep expertise in cybersecurity, preferably in fintech, and a passion for securing innovative financial products. What You'll Do Develop and execute a comprehensive cybersecurity strategy to protect our platform, customer data, and intellectual property. Ensure compliance with fintech and data privacy regulations, including GDPR, CCPA, PCI DSS, and other relevant standards. Oversee the design, implementation, and monitoring of security controls for payment processing, lending platforms, and other financial products. Lead incident response, including managing and mitigating cybersecurity breaches, vulnerabilities, and regulatory inquiries. Collaborate with product, engineering, and compliance teams to embed security by design principles into new features and services. Build and maintain a robust security framework for credit and lending operations, ensuring protection against fraud and data breaches. Conduct risk assessments and implement mitigation strategies for emerging threats in the fintech landscape. Manage relationships with external security vendors, auditors, and regulatory bodies. Develop and lead a high performing security team, fostering a culture of proactive risk management. Support international expansion by aligning security practices with global data protection and financial regulations. Stay ahead of cybersecurity trends, advising the executive team on evolving threats and technologies. Qualifications Who You Are Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field. 10+ years of progressive experience in cybersecurity, with at least 5 years in a senior leadership role at a fintech or high growth tech company. Deep expertise in securing credit and lending platforms, preferably in the fintech industry, with knowledge of fraud prevention, secure payment processing, and regulatory compliance (e.g., Truth in Lending Act, Fair Credit Reporting Act). Proven track record in designing and implementing security architectures for cloud based systems, APIs, and financial applications. Strong understanding of data privacy, encryption, and consumer protection laws in a fintech context. Experience leading incident response, penetration testing, and vulnerability management programs. Exceptional communication skills, with the ability to explain complex security concepts to non technical stakeholders, from engineers to board members. Strategic mindset with the ability to balance security rigor with business innovation in a fast paced startup environment. Nice to have Experience at a fintech company with exposure to payment processing, lending, or brokerage platforms. Familiarity with SOC 2, ISO 27001, or other cybersecurity certifications and frameworks. Knowledge of international cybersecurity regulations to support global operations. Experience building and scaling security teams in high growth environments. Compensation Benefits And Perks 100% company paid medical, dental, and vision coverage for you and your dependents on your first day of employment. Monthly fitness reimbursement up to $100 or a full membership to LifeTime Fitness. 401(k) with a 2.5% match and immediate vesting. Meal program for breakfast, lunch, and dinner. Life and accidental insurance. Flexible PTO. We know how to fine tune corporate security because we've led effective and efficient Fortune 500 level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.