Empirical - Fractional CISO

The role

A fractional security leader will build and maintain the security program for Empirical. This includes conducting gap assessments, drafting policies, and hardening the Google Workspace environment.

What you will do

• Run an initial security gap assessment across people, tools and processes
• Draft and maintain security policies, incident response plans and risk assessments
• Harden Google Workspace environment against the CIS benchmark
• Strengthen MFA and identity management, MDM and remote wipe, centralized logging and vulnerability management
• Prepare the company for client audits and vendor security questionnaires
• Review client MSA and security addendum language
• Define secure-coding and DevSecOps practices for engineers working in client repositories
• Build a phased roadmap toward SOC 2

Required qualifications

• Experience helping US software development or IT services companies, such as staff augmentation firms, dev shops or consultancies
• Track record standing up security programs from near-zero and preparing small companies (20–100 people) for client audits and vendor questionnaires
• Hands-on experience with SOC 2 Type 2, NIST CSF and CIS Controls
• Experience with Google Workspace hardening (CIS benchmark), MDM/remote wipe, MFA/identity management, centralized logging/SIEM and vulnerability management
• Ability to draft policies, incident response plans and risk assessments, and to review client MSA and security addendum language
• Comfortable with DevSecOps and secure-coding practices for engineers working in client repositories
• CISSP, CISM or equivalent certification
• Advanced English required
• Familiarity with AI tools

Nice to have

• Experience with remote, distributed or LATAM-based teams
• Familiarity with HIPAA/healthcare and financial-services client requirements
• Experience working alongside fractional CTOs

Benefits

• Remote/flexible work
• Highly competitive compensation in US dollars
• Opportunities for personal and professional development
• Mentorship, coaching and training as needed
• Selective paid training
• Mentorship programs
• Referral programs

Before you apply

• Only considering candidates located in Latin America

About the company

Empirical empowers early and growth stage tech companies to create the right products in the right way by providing Product & Technology Leadership and Product Development Teams. They are a people first company with a remote team of around 40–50 software engineers across Latin America.