Chief Information Security Officer (CISO)

The role

The CISO will own the internal security program end-to-end and serve as a security leader to customers, partners, and the market. This role involves designing global security strategy, managing cyber risk, and leading teams across product security, infrastructure, and engineering.

What you will do

• Design and execute a global security strategy.
• Advise the board and executive leadership on cyber risk.
• Own the cyber risk management program.
• Build and lead teams for product security, infrastructure, and engineering.
• Oversee threat detection, vulnerability management, and incident response.
• Embed secure-by-design principles across engineering workflows.
• Establish enterprise AI governance.
• Partner with Engineering and Product to embed security in development.
• Serve as the executive-level security contact for prospects and customers.
• Recruit, mentor, and retain a high-performing security organization.

Required qualifications

• 15+ years in information security
• 5+ years in a senior leadership role (CISO, VP/Deputy CISO, Sr. Director of Security, or equivalent)
• Experience building and scaling security teams across product security, architecture, infrastructure, and risk management
• Experience securing cloud-native SaaS environments
• Experience developing AI governance frameworks and familiarity with AI/ML attack surfaces
• Experience operating as a customer-facing security executive
• Success improving security program maturity using NIST CSF, ISO 27001, or similar frameworks
• Ability to present to boards and advise executive leadership
• Experience as a cross-functional partner with legal, compliance, and IT leadership
• Experience managing significant security budgets

Nice to have

• Master's degree in Information Security, Computer Science, or a related field
• Executive leadership education
• Experience at a cybersecurity vendor
• Background in critical infrastructure security (energy, utilities, telecommunications)
• Hands-on experience deploying AI/ML within security operations
• Familiarity with AI security frameworks (OWASP Top 10 for LLMs, NIST AI RMF, MITRE ATLAS)
• Experience securing AI features within a commercial SaaS product
• Track record conducting security due diligence for M&A transactions
• Experience engaging government stakeholders or congressional committees

Benefits

• Competitive compensation with equity and 401k
• Comprehensive healthcare with dental and vision coverage
• Flexible paid time off and paid holiday time off
• 12 weeks of new parent or family leave
• Personal and professional development resources

Before you apply

• All persons hired will be required to submit satisfactory proof of identity and legal authorization

About the company

Obsidian Security is a global leader in cyber security protecting the SaaS and non-human identity layer. The company provides unified visibility into human and machine identities across SaaS estates.