Chief Information Security Officer

Role Description The Chief Information Security Officer (CISO) at KAPITAL is a full-time remote role responsible for defining, implementing, and overseeing the organization’s information security strategy. The CISO will lead the development and maintenance of security policies, standards, and procedures, and ensure alignment with business objectives and regulatory requirements. Day-to-day tasks include assessing security risks, directing incident response, overseeing security monitoring and threat detection, and coordinating audits and compliance activities. The CISO will collaborate with technology, operations, and business teams to embed security controls into applications, infrastructure, and processes, and will provide regular reports and guidance to senior leadership on security posture and risk. This role also includes managing vendor and third-party security risk, leading security awareness initiatives, and driving continuous improvement in cybersecurity practices across the organization.
Qualifications
Strong expertise in Information Security and Information Security Management, including policy development, risk management, and governance frameworks.
Proficiency in Cybersecurity practices such as threat detection, incident response, security monitoring, and vulnerability management.
Experience with Application Security, including secure software development lifecycle (SDLC), code review, and integration of security controls into applications and services.
Knowledge of Business Continuity planning, disaster recovery, and resilience strategies to ensure ongoing operations during and after security events.
Proven leadership experience in senior security or technology roles, with the ability to build and mentor diverse, distributed teams.
Familiarity with relevant regulations and standards (e.g., ISO 27001, NIST, SOC 2, PCI DSS, GDPR or other data protection frameworks as applicable).
Strong communication skills, with the ability to explain complex security concepts to technical and non-technical stakeholders and influence executive decision-making.
Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field; advanced degree or industry certifications (e.g., CISSP, CISM, CISA, CCSP) are beneficial.
Experience working in remote or globally distributed environments and managing security across cloud, on-premises, and hybrid infrastructures.

Work arrangement
Yes