Chief Information Security Officer (CISO) jobs in United States
cer-icon
Apply on Employer Site
company-logo

Optery · 2 hours ago

Chief Information Security Officer (CISO)

Optery is a profitable company specializing in personal data removal services, and they are seeking a hands-on Chief Information Security Officer (CISO) to lead their security program. The role involves setting strategies, managing security operations, and collaborating with leadership to enhance security and compliance initiatives.

Cyber SecurityIdentity ManagementPrivacySecuritySoftware

Responsibilities

Own Optery’s information security strategy, roadmap, and policies, aligned to our industry-leading security and privacy products
Lead and extend Optery’s security program mapped to common frameworks (SOC 2, ISO 27001, CIS, NIST), appropriate for a high-growth, remote-first company
Partner with engineering to embed secure SDLC practices: threat modeling, code scanning, secrets management, access controls, and secure cloud configuration
Design and run an incident response program, including playbooks for data handling, data broker interactions, ransomware/social engineering scenarios, and customer notifications
Oversee identity and access management across core systems (SaaS, cloud, data, admin apps) following least-privilege principles
Lead vendor and third-party security reviews, especially for data- or privacy-impacting services
Partner with GTM, finance, ops, and sales to complete security questionnaires, DPAs, and customer diligence to unblock deals
Work with product/legal to ensure our data flows and retention/erasure practices align with CCPA, GDPR, and other consumer privacy laws we help our customers exercise
Define, track, and report security KPIs/KRIs to leadership and the board
Train and evangelize security practices across a distributed team so security is part of onboarding and day-to-day work

Qualification

Information SecuritySOC 2ISO 27001Cloud SecuritySecurity EngineeringData Protection TechnologiesStartup-friendly MindsetPublic SpeakingCommunication

Required

8+ years in information security, with increasing ownership across GRC, security engineering, and/or product/app security
Experience building or maturing a security program at a SaaS, data, cybersecurity, or privacy-focused company
Practical experience with SOC 2 and/or ISO 27001 (authoring policies, gathering evidence, working with auditors, driving remediation)
Strong understanding of cloud security (preferably AWS): networking, IAM, secret management, logging/monitoring
Comfortable meeting with customers, prospects, and partners to explain Optery's security posture and win trust
Excellent written and verbal communication skills; able to write policies people can actually follow
Startup-friendly mindset: willing to prioritize, right-size controls, and make progress quickly

Preferred

Experience at a company that handles PII
Experience securing distributed/remote teams and mixed contractor/employee environments
Background in data protection technologies (DLP, EDR, MDM, SSO, CASB) and how to roll them out in stages
Experience supporting enterprise sales cycles by answering security questionnaires
Recognized thought leader in security, fluent public speaker, and active participant in public-facing security communities and conferences

Benefits

Competitive Equity
Health, dental, and vision insurance
401(k) with employer match
Paid time off
Home office stipend

Company

Optery

twittertwittertwitter
company-logo
Optery is an opt-out software that removes your home address, phone number, email, and other private information from the Internet.

Funding

Current Stage
Early Stage
Total Funding
$2.7M
Key Investors
Bayhouse CapitalY Combinator
2023-05-08Seed· $2.7M
2022-04-15Seed
2021-07-01Seed

Leadership Team

leader-logo
Dekel Barzilay
Co-Founder, CRDO (Chief research and development officer)
linkedin
leader-logo
Chen Atlas
CTO & Founder
linkedin
Company data provided by crunchbase