Head of Information Security

🔥 13 hours ago

🌏 Anywhere in the World

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenZeppelin

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2015

💼 Consulting

📦 Logistics

📣 Marketing

💰 Seed Round on 2018-01

Consulting • Logistics • Marketing

OpenZeppelin is a leading provider of open-source tools and services that secure and streamline smart contract development. They offer a comprehensive suite of solutions, including a secure smart contract library, an interactive smart contract generator (Contracts Wizard), and a defender cloud service for monitoring, automating, and upgrading smart contracts. OpenZeppelin's services include smart contract security audits and emergency response teams to address vulnerabilities promptly. Their ecosystem stack accelerates developer onboarding and ensures high security standards are met in decentralized applications. Trusted by major decentralized projects, OpenZeppelin is a standard-bearer in the blockchain space, focusing on security, scalability, and privacy in smart contract and onchain applications development.

📋 Description

• Own the strategy, design, and continuous maturation of OpenZeppelin's Information Security Program • Manage the team executing the Information Security Program • Set strategic direction, multi-year roadmap, and risk posture; deliver department OKRs • Own the IT and technology budget and technology procurement • Lead secure adoption of AI, including AI governance, AI tool and agentic workflow reviews, and agentic infrastructure security • Manage frontier model providers as critical vendors, including security and data-handling diligence, retention and training-use commitments, DPAs, and subprocessor flow-downs • Address emerging obligations such as the EU AI Act • Own audit, certification, and attestation strategy and execution, including penetration testing, SOC 2 Type 2, and ISO/IEC 27001 • Run third-party and vendor risk management • Represent the security program to customer security teams, regulated financial institutions, and auditors • Maintain data maps, data classification, records of processing, and vendor/subprocessor inventory • Own privacy compliance with Legal, including GDPR, CCPA/CPRA, DPAs, contractual security commitments, and privacy-by-design reviews • Own incident response, including playbooks, tabletop exercises, post-incident reviews, and breach notifications • Manage bug bounty programs and partner with development teams on SDLC security • Oversee identity and access management, provisioning, onboarding/offboarding, endpoint security, physical security, disaster recovery, business continuity, and backups • Use automation and AI-powered workflows to scale IT and security operations

🎯 Requirements

• 10+ years of Security and IT experience • 3+ years leading an IT Security and GRC function, not solely IT operations, in a high-growth tech company • Demonstrated ownership of security strategy, not just execution • Trajectory toward CISO, including end-to-end ownership of a security program • Experience presenting to executives or boards • Ability to articulate the rationale behind implemented controls • Experience securing or governing AI/LLM-enabled products or enterprise AI adoption, including agentic systems and third-party model-provider risk • Ability to apply privacy and data-protection laws and practices, including GDPR and CCPA/CPRA, in the AI context • 5+ years working in blockchain or FinTech with an enterprise client base, including rigorous third-party security diligence (nice to have)

🏖️ Benefits

• Meet your teammates at company gatherings around the world 😎 • Enjoy the flexibility of fully remote work 🌎 • Take the time you need with flexible time off 🏝 • 8 weeks of paid leave for primary caregivers • 4 weeks of paid leave for secondary caregivers • One-time $3,600 baby bonus 💙 • Up to $500 in equipment support for a home office 🪑 • Medical insurance 🏥 • Learning and development opportunities 🧠 • Monthly stipend for a preferred co-working space 💻 • Paid work test (up to 20 hours of paid work)