Chief Information Security Officer

The role

The CISO will own security, compliance, and customer trust for an AI-native ERP and financial automation platform. This person will build an in-house security program to support enterprise sales and manage security operations.

What you will do

• Answer security questionnaires, TPRMs and RFPs
• Join customer and prospect calls with CIOs and IT security teams
• Maintain a trust center and security collateral pack
• Own SOC 1 and SOC 2 audits
• Lead the path to ISO 27001, ISO 42001 and other frameworks
• Run Vanta as the system of record for controls and evidence
• Partner with Legal on DPAs, BAAs, GDPR transfer mechanisms, DORA and non-US privacy laws
• Review security and audit-cooperation clauses in customer contracts
• Own the incident response plan and lead response when incidents happen
• Own detection and email security including SIEM, EDR, email protection, and identity alerting

Required qualifications

• 10+ years in security
• 3+ years leading a program at a B2B SaaS company
• Has owned SOC 1 / SOC 2 audits end to end
• Comfortable on calls with enterprise CIOs and auditors
• Hands-on with AWS, Okta, Google Workspace, EDR and SIEM tooling
• Working knowledge of GDPR, DPAs and contract security terms
• Has led real incident response, including customer communication

Nice to have

• ISO 27001 experience
• Fintech, ERP or accounting software background

About the company

Campfire is a next-gen core accounting platform built for modern mid-market finance teams. It is an AI-native ERP and financial automation platform.