Chief Information Security Officer (CISO), RFA

Remote (US). Posted 2 days ago

The role

You will lead security for RFA and its financial services clients as Chief Information Security Officer. You will lead RFA's GRC, SOC, and vCISO teams and act as senior security advisor to client leadership.

What you will do

Set RFA's security strategy and lead its GRC, SOC, and vCISO teams.
Build and run RFA's client security offering, including vCISO, managed detection and response, SOC, vulnerability management, email security, and incident response.
Act as trusted security advisor to client CFOs, COOs, and CCOs on board updates, regulatory readiness, and investor DDQs.
Lead incident response for RFA clients, from first alert to client communication and lessons learned.
Own RFA's own security and compliance program, including SOC 2 and client security questionnaires.
Work with Titan's engineers to keep AI agents in client environments safe, with least-privilege access, guardrails, logging, and audit trails.
Guide clients adopting Claude, ChatGPT, and Copilot on AI governance, data boundaries, and shadow AI discovery.
Join sales cycles as RFA's security voice and turn what is learned into packaged services and pricing.

Required qualifications

10+ years in security, including leading a security function or practice as CISO, VP, or Head of Security.
Experience building or running security services at an MSP, MSSP, or security consultancy, ideally serving financial services firms.
Knowledge of SEC cybersecurity rules, Reg S-P, investor DDQs, and frameworks such as NIST CSF, SOC 2, and ISO 27001.
Hands-on experience with Microsoft 365, Entra ID, Intune, Defender, and modern EDR, SIEM, and email security stacks.
Ability to explain risk to a fund COO in plain language and to an engineer in technical detail.
Extreme ownership, willingness to build a security program rather than inherit one.

Nice to have

CISSP, CISM, CISA, or CRISC.
vCISO experience across multiple financial services clients.
Experience securing LLM applications or AI governance work, such as ISO/IEC 42001 or NIST AI RMF.

Before you apply

Titan is building the AI workforce for IT and has put AI agents into production; the role involves securing those agents.

About the company

RFA is an IT and cybersecurity partner to financial services firms such as hedge funds, private equity, and asset managers. RFA is part of Titan, which is building the AI workforce for IT.