Chief Information Security Officer

The role

The CISO will own the security strategy and program end-to-end. This role involves securing the product, infrastructure, people, vendors, and relationships with bank partners and auditors.

What you will do

• Own Slash's security strategy and program end-to-end.
• Build and lead the security team.
• Secure a platform including card issuing, PCI DSS, ACH, wire flows, stablecoin payments, treasury, working capital, and public API.
• Lead account-security and anti-takeover work.
• Set the approach for securing AI agents and automation.
• Own cloud and infrastructure security posture across AWS and Cloudflare.
• Build and run incident response.
• Own compliance frameworks and audits including SOC 2 Type II and PCI.
• Stand up third-party and vendor risk management.
• Run pen testing, bug bounty program, and red-team exercises.

Required qualifications

• 10+ years in security.
• Meaningful time leading security at a fintech, payments company, bank, or crypto company.
• Track record of standing up a security program from an early stage and scaling it through hypergrowth.
• Deep technical credibility.
• Hands-on experience with PCI DSS and SOC 2.
• Experience with the security expectations of sponsor banks and FFIEC-style examinations.
• Strong cloud security experience, ideally AWS, in a modern engineering environment.

Nice to have

• experience securing crypto or stablecoin infrastructure
• card issuing programs
• global and multi-entity payment operations
• been a founder
• early security leader at a company that went through a big growth arc

Benefits

• Competitive salary + equity
• High autonomy + ownership culture
• Comprehensive health, dental, and vision benefits
• Free lunch every day
• dinner if you stay past 9 PM
• Unlimited PTO

About the company

Slash is a fintech building business banking infrastructure. Founded in 2021, it is headquartered in San Francisco and has a strong in-person culture.