Chief Information Security Officer

• CAIS is seeking a Chief Information Security Officer (CISO) who pairs deep technical expertise with strategic vision to lead the firm’s cybersecurity program and Operational Risk Management practices
• This role will drive security strategy—including AI security strategy—mitigate risks, ensure regulatory compliance, and protect critical financial assets and client data
• The CISO will oversee all cybersecurity and operational risk functions while remaining hands‑on with architecture, tooling, and incident response, and will ensure third‑party and vendor security align with the firm’s risk management framework
• Cybersecurity Leadership: Develop and execute a comprehensive security strategy aligned with industry standards (NIST, ISO 27001, CIS Controls) to safeguard sensitive financial data
• Risk Management & Threat Intelligence: Continuously assess cyber threats, vulnerabilities, and implement proactive security measures
• Operational Risk Oversight: Lead the firm’s operational risk management framework, including identification, assessment, and mitigation of operational risks across business processes, technology systems, and third‑party relationships
• Regulatory Compliance & Audit: Ensure compliance with financial industry regulations (SEC, FINRA, SOC 2), managing audits and certifications
• Third‑Party & Vendor Security: Evaluate and manage security risks associated with external partners, vendors, and cloud service providers, ensuring compliance with cybersecurity policies
• Incident Response & Crisis Management: Lead the firm’s response to security incidents, breaches, and fraud, ensuring swift resolution and recovery
• Technology & Infrastructure Security: Lead secure architecture design, cloud security, endpoint protection, and network security—personally engaging in design reviews, tooling evaluations, and technical decision‑making
• AI Security Strategy: Develop and implement security policies and governance frameworks for AI and machine learning systems, ensuring responsible AI deployment, data integrity, model security, and compliance with emerging AI regulations
• Cybersecurity Operations: Direct and actively participate in day‑to‑day cybersecurity functions, including security monitoring, threat hunting, vulnerability management, and detection engineering
• Data Protection & Privacy: Implement robust encryption standards, access controls, and data governance policies
• Leadership & Collaboration: Partner with executive leadership, IT teams, and external stakeholders to align security initiatives with business objectives
• Employee Education & Awareness: Develop security training programs and promote a culture of cybersecurity across the organization

Benefits

• Healthcare & wellness: We offer highly subsidized medical, dental, vision plan options, and monthly reimbursements to support your lifestyle outside of work
• Coverage Waiver Allowance: Have benefits through another source? Receive a monthly allowance for waiving coverage
• Voluntary benefits: Enjoy discounted pricing on virtual marketplace retail benefits, pet insurance, legal, identity theft, critical illness, hospital coverage, and additional life and AD&D insurance
• Paid parental leave: New parents receive up to 16 weeks of fully paid leave
• Flexible PTO: Take the time you need in coordination with your team and manager. Plus, enjoy nine paid holidays throughout the year
• 401(k) matching: Participate in a comprehensive 401(k) plan with a 4% match
• Free Food: Take advantage of our in‑office lunch program and a fully stocked kitchen
• Team events: Join our monthly happy hours, team building activities, and other events to ensure we stay connected

Qualifications

Proven track record in financial services cybersecurity or a regulated industry. Excellent communication and leadership skills, with an ability to influence stakeholders at all levels. Experience developing AI security strategies, governance frameworks, and risk assessments for AI/ML systems. A leader who thrives at the intersection of strategy and execution—equally comfortable presenting to the Board and working through a security incident hands‑on. Experience in information security leadership roles with a strong hands‑on technical background (e.g., security engineering, penetration testing, cloud security architecture, or incident response). Expertise in risk management, operational risk frameworks, vendor security, cloud security, and encryption protocols. CISSP, CISM, or CISA certifications preferred. Strong knowledge of regulatory compliance frameworks affecting financial institutions.