CISO

The role

The CISO will own security governance, risk, and compliance strategy with a focus on ISO certification and regulatory readiness. This role involves partnering with engineering, infrastructure, legal, and operations teams to embed security into workflows.

What you will do

• Own and drive information security and compliance strategy focusing on ISO 27001 readiness and maintenance
• Serve as executive owner for security compliance programs including ISO 27001, SOC 2, vendor risk, and customer security reviews
• Design, implement, and improve security governance framework, policies, standards, and risk management processes
• Partner with Engineering, Infrastructure, Product, Legal, and Operations to embed compliance and security requirements
• Lead and manage external audits, certifications, and assessments
• Translate regulatory, customer, and partner security requirements into scalable controls
• Own the risk management lifecycle including identification, assessment, prioritization, and executive reporting
• Establish and track security and compliance metrics for executive leadership and the board
• Oversee incident response governance, policies, playbooks, and escalation paths

Required qualifications

• 8–12+ years of experience in information security, GRC, or security leadership roles
• Demonstrated ownership of compliance programs
• Hands-on experience leading ISO 27001 certification efforts
• Experience operating as a security leader in a high-growth, technology-driven company
• Strong understanding of security governance, risk management, and control frameworks (ISO 27001/27002, SOC 2, NIST, etc.)
• Proven ability to partner with engineering and technical teams to implement controls in cloud-native and application-driven environments
• Experience managing third-party risk, customer security questionnaires, and enterprise security reviews
• Ability to communicate risk, tradeoffs, and priorities to executives and non-technical stakeholders

Nice to have

• Experience with additional frameworks such as SOC 2 Type II, PCI DSS, ISO 22301, or regional regulatory requirements
• Prior experience acting as a first or early security leader at a scaling company
• Familiarity with cloud security and modern application architectures
• Experience supporting global customers or international compliance requirements
• Security or compliance certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer / Auditor)
• Experience presenting security posture or risk assessments to boards or executive committees

Benefits

• Unlimited time off (minimum 10 days required)
• Flexible working
• Stipend to set up a home workspace
• US Rainmakers cover 95% of health, dental, and vision plan costs and 90% for dependents
• 100% company-subsidized life insurance plan
• 401(k) with a 4% company match
• Equity option plan
• Monthly stipend for eligible health and wellness spending
• In-office meals via DoorDash credit
• Team and company offsites, both domestic and international

About the company

Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. The company is a Visa and Mastercard Principal Member providing secure, scalable infrastructure for stablecoin movement.