Strike is hiring a Remote Chief Information Security Officer
\nStrike's mission is to build a more connected financial world.\n\nStrike allows users to send and receive money anywhere, instantly. Strike is built on top of the Bitcoin network โ the largest global, interoperable and open payments standard. Strike believes that open payment networks enable universal participation in the financial system, ushering in a new digital economy with truly borderless money transfers. Strike leverages Bitcoinโs open payment network to offer users the first global peer-to-peer payments app and a novel bitcoin-native payments experience.\nRole:\n\nStrike is looking for a CISO to be a key executive to lead the security team for our rapidly growing company. The CISO will provide technical expertise, ownership and improvement of security processes, and development of a high performing security team. The CISO is responsible for enterprise security strategy, governance, operations, and the budget for the cyber security program.This person must be an engaged, roll-up your sleeves leader and should enjoy a fast-paced environment.\nResponsibilities:\n\n\n* The CISO will be closely involved in maintaining and improving security within Strikeโs product, with prior experience in leading application security and advocating for product security improvements. \n\n* Lead a global team of information security professionals across information security governance, incident response, risk management, and security operations. \n\n* The CISO will advocate and represent Strikeโs approach to security including product strengths, roadmaps, and key differentiators. The CISO will need to understand the complexity of the business, will build relationships with CISOs of current and potential partners, and will be a key player in business development discussions. \n\n* The CISO will lead initiatives around Service Organization Control 2 (SOC 2), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), IS0 27001 and 27018, Cloud Security Alliance (CSA), and various other laws and regulations including Executive Orders. In addition, the CISO will have demonstrated the ability to negotiate security and compliance during the enterprise sales or partnership process. \n\n* Identify Information security objectives and roadmap in compliance with corporate governance, regulatory policy and industry best practice.\n\n* Represent Strike security at meetings or exams with various regulators. \n\n* Responsible for driving information security strategy and approach for various compliance frameworks in partnership with stakeholders; this includes ownership and governance of information security policies and procedures as well as ownership of the strategy and delivery for security operations to support these frameworks. Ensure compliance with changing laws and applicable regulations in coordination with Compliance and Legal.\n\n* Collaborate with the Chief Technology Officer to ensure cybersecurity considerations are embedded into all IT and product initiatives.\n\n* Oversee and partner with other departments as needed in conducting investigations and developing remediation plans in connection with information security incidents and breaches.\n\n* Maintain a current understanding of the IT threat landscape (including threats that the company may inherit from offering security products to the market at large) that could potentially impact company operations and translate that knowledge into potential risks and actionable plans to protect the business.\n\n* Identify, assess, monitor and proactively address customer concern areas specifically related to information security.\n\n\n\nRequirements:\n\n\n* Bachelor's degree in computer science, information technology, or a related field.\n\n* 10+ years of experience in information security and/or related technical areas, with a proven track record of success in developing and implementing information security strategies.\n\n* 5+ years of experience in a technical leadership role, with a track record of recruiting and supporting top-tier employees to realize a high-performing team.\n\n* Fintech and crypto experience and ability to work in highly regulated environments\n\n* Extensive knowledge of common information security frameworks and standards, such as CIS, CSF, ISO/IEC 27001, NIST Cybersecurity Framework (1.1 and Draft 2.0), SOC 2, etc.\n\n* Technical depth and hands-on experience in information security and adjacent areas such as cloud computing, software as a service (SaaS) architectures, etc.\n\n* Proven record of working at a fast pace and producing high quality deliveries both directly and through your team.\n\n* Employment history must demonstrate increasing levels of responsibility within highly regulated environments (e.g., FinTech) \n\n* Excellent communication skills, including the ability to convey complex security related concepts to technical and nontechnical audiences.\n\n* US based\n\n* Passion for Bitcoin and Strikeโs mission\n\n\n\n\n \n\nStrike is a remote-first company, paying competitive compensation based on market and location.\nUS-Based Positions\n\n\n* Equity in a high growth startup\n\n* Health, dental, and vision insurance premium contributions; short & long term disability insurance and basic life insurance \n\n* Cell phone and internet reimbursement\n\n* Flexible PTO, sick leave & parental leave\n\n* Access to a company 401k plan\n\n\n\n\nWe prioritize talent, passion and experience over educational background. Our team includes dropouts, PhDs and everything in-between. \n\n \n\nBy clicking submit application below, you consent to our use and processing of your data as described in our Candidate Privacy Notice. \n\n#Salary and compensation\n
No salary data published by company so we estimated salary based on similar jobs related to Crypto, Embedded, Cloud and Sales jobs that are similar:\n\n
$67,500 — $167,500/year\n
\n\n#Benefits\n
๐ฐ 401(k)\n\n๐ Distributed team\n\nโฐ Async\n\n๐ค Vision insurance\n\n๐ฆท Dental insurance\n\n๐ Medical insurance\n\n๐ Unlimited vacation\n\n๐ Paid time off\n\n๐ 4 day workweek\n\n๐ฐ 401k matching\n\n๐ Company retreats\n\n๐ฌ Coworking budget\n\n๐ Learning budget\n\n๐ช Free gym membership\n\n๐ง Mental wellness budget\n\n๐ฅ Home office budget\n\n๐ฅง Pay in crypto\n\n๐ฅธ Pseudonymous\n\n๐ฐ Profit sharing\n\n๐ฐ Equity compensation\n\nโฌ๏ธ No whiteboard interview\n\n๐ No monitoring system\n\n๐ซ No politics at work\n\n๐ We hire old (and young)\n\n
\n\n#Location\nWorldwide
๐ Please reference you found the job on Remote OK, this helps us get more companies to post here, thanks!
When applying for jobs, you should NEVER have to pay to apply. You should also NEVER have to pay to buy equipment which they then pay you back for later. Also never pay for trainings you have to do. Those are scams! NEVER PAY FOR ANYTHING! Posts that link to pages with "how to work online" are also scams. Don't use them or pay for them. Also always verify you're actually talking to the company in the job post and not an imposter. A good idea is to check the domain name for the site/email and see if it's the actual company's main domain name. Scams in remote work are rampant, be careful! Read more to avoid scams. When clicking on the button to apply above, you will leave Remote OK and go to the job application page for that company outside this site. Remote OK accepts no liability or responsibility as a consequence of any reliance upon information on there (external sites) or here.