Chief Information Security Officer

🔥 14 hours ago

🌐 United States, Germany, +3 more countries – Remote

🇺🇸 United States – Remote 🇩🇪 Germany – Remote 🇳🇱 Netherlands – Remote 🇬🇧 United Kingdom – Remote 🇧🇷 Brazil – Remote

🐊 Florida – Remote

🐊 Florida – Remote

⏳ Contract/Temporary

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Decentralized Masters

WebsiteLinkedInAll Job Openings

1 - 10 employees

📚 Education

💳 Fintech

🌐 Web 3

Education • Fintech • Web 3

Decentralized Masters is a leading educational platform specialized in Decentralized Finance (DeFi). It offers top-tier mentorship, advanced learning systems, and strategic tools to help individuals excel in the DeFi markets. The company focuses on equipping both beginners and experienced professionals with the necessary knowledge and skills to navigate the complexities of DeFi and emerging blockchain technologies. Through its comprehensive training programs, Decentralized Masters aims to demystify DeFi, making it accessible and understandable, thereby empowering users to make informed financial decisions and maximize their investment potential.

📋 Description

• Own security strategy, roadmap and budget across all Catalyst Capital brands • Report security posture, top risks and trends to leadership monthly and maintain an actionable risk register • Lead incident response end to end, including detection, triage, containment, eradication, recovery and postmortems • Coordinate with legal counsel, forensics firms, insurers and regulators during incidents • Maintain incident-response runbooks and run tabletop exercises • Own group-wide identity and access security, including SSO, MFA, least-privilege roles, admin redundancy and short-lived credentials • Set the AWS security baseline • Assess third-party and vendor security, audits and attestations, and establish connection requirements • Set platform login-protection and account-takeover-defense standards with engineering teams • Own email security, staff training, phishing simulations and brand-protection takedowns • Write and enforce security policies; prepare for SOC 2 or ISO 27001 with Legal & Compliance • Own the public security and trust story, including product trust pages • Manage and develop security engineers and determine what to build in-house versus outsource • Provide security content for member scam-awareness messaging • Build and maintain a complete attack-surface inventory covering applications, cloud, repositories, SaaS tools and integrations • Design and operate AI-driven security systems for code and dependency review, configuration and access audits, and vendor documentation review • Own SIEM, Rapid7, endpoint protection, email security, identity and device-management tooling • Ensure critical systems provide usable logs; use AI to triage alerts and hunt across them • Define secure AI and vibe-coding standards, including permitted data access and review paths • Secure production AI agents and automations through scoped credentials, tool permissions, prompt-injection defenses, exposure controls, monitoring and guardrails • Review high-risk AI agents before launch

🎯 Requirements

• 10+ years in security, including 3+ years leading a security function as CISO, Head of Security or equivalent at a company of 100+ people • Has led live-incident response, not just tabletop exercises, including briefing executives during the incident • Has built or rebuilt a security program from an early stage: strategy, policy, tooling, training and incident response • AI-native operator using AI agents daily for detections, code and configuration review, vendor documentation, policy drafting, workflows and automations • Deep, current knowledge of prompt injection, over-scoped agent permissions, credential and data exposure through AI tools, and insecure AI-generated code • Hands-on with cloud security, identity and access management, SIEM, endpoint protection and email security; AWS preferred • Writes scripts, tooling and automation, not only vendor UIs • Experience in crypto, fintech or another high-fraud industry, with deep knowledge of phishing, social engineering and impersonation attacks • Thorough with documentation, contracts and vendor security terms • Able to brief executives in plain language, train non-technical staff, and write actionable policies • Comfortable spending about half of the time hands-on while leading a small, fully remote team across many time zones • Experience preparing a company for SOC 2 or ISO 27001 preferred • Experience securing or evaluating AI agents and LLM-based tools in production preferred • Experience running third-party risk programs covering financial data aggregators or similar providers preferred • Experience running a brand protection or takedown program preferred • Experience with customer-facing security features such as account-takeover defense preferred • Experience with risk quantification (FAIR or similar) and presenting to a board preferred • Certifications such as CISSP, CISM, GCIH or OSCP preferred

🏖️ Benefits

• Competitive compensation package • Independent Contractor opportunity • Fully remote, globally distributed team • Team offsites (Dubai, Costa Rica, etc.) • Collaborative, forward-thinking culture that values innovation and results

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume