Chief Technology Officer

Company Description
CyberScuds | cyberscuds.ai
CyberScuds is an AI-native cybersecurity company transforming how acquirers evaluate cyber risk in mergers and acquisitions. Our asset based and staged approach delivers decision-ready cyber intelligence early enough to influence valuation, negotiations, and transaction terms.
CyberScuds combines cybersecurity expertise, governance, risk, and compliance (GRC) evidence, and responsible AI to identify risks that could impact the acquired asset. Rather than relying on broad, checklist-driven assessments, our platform connects business value to critical assets, potential failure modes, security controls, and supporting evidence.
Our staged diligence model scales the depth and cost of analysis with deal certainty, from early public-source screening and compliance documentation review to targeted technical assessments and confirmatory diligence. The result is actionable, auditable cyber intelligence that helps deal teams protect investment value and make better acquisition decisions.
Role Description
CyberScuds is seeking a Chief Technology Officer (CTO) to lead the technical strategy, architecture, and development of our AI-native cybersecurity due diligence platform. This is a full-time, remote leadership role combining cybersecurity domain expertise, GRC knowledge, AI engineering, and product development.
The CTO will be responsible for building technology that transforms fragmented cybersecurity and compliance evidence into structured, defensible risk assessments tailored to specific M&A investment theses.
Working closely with executive leadership, the CTO will translate CyberScuds' thesis-driven diligence methodology into scalable software, integrating security frameworks, control assessments, threat intelligence, and AI-assisted analysis into workflows that deliver actionable findings for deal teams.
Key Responsibilities
Lead the architecture, development, and evolution of CyberScuds' AI-native cybersecurity diligence platform.
Develop systems that ingest, normalize, and analyze cybersecurity and GRC evidence, including SOC 2 reports, ISO 27001 documentation, security policies, questionnaires, architecture documentation, and other control evidence.
Translate cybersecurity frameworks, threat models, attack paths, and control effectiveness into structured, evidence-based risk assessments.
Design and implement responsible AI workflows emphasizing accuracy, traceability, explainability, human oversight, and auditable findings.
Build scalable methodologies for identifying cyber risks that could affect acquisition value, business continuity, intellectual property, customer data, and post-acquisition integration.
Integrate cybersecurity intelligence, public-source research, compliance data, and targeted technical analysis into a unified diligence workflow.
Establish secure software development practices, data protection controls, and appropriate governance for handling sensitive acquisition information.
Lead engineering priorities, technical architecture, product development, and the evaluation of emerging AI and cybersecurity technologies.
Collaborate with business leadership to ensure technical capabilities translate into clear, actionable insights for corporate development teams, investors, and technology executives.
Qualifications
Cybersecurity and GRC Expertise
Strong understanding of cybersecurity risk management, security architecture, threat modeling, vulnerabilities, attack paths, and enterprise security controls.
Practical experience with GRC frameworks and standards, including NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, and related control assessment methodologies.
Experience evaluating security and compliance documentation, identifying control gaps, assessing evidence quality, and translating technical findings into business risk.
Familiarity with third-party risk management, cybersecurity assessments, security audits, or technical due diligence.
Ability to connect cybersecurity exposures to business impact, including operational disruption, data compromise, regulatory exposure, and financial consequences.
AI and Software Engineering
Experience architecting and delivering secure, scalable SaaS platforms or AI-enabled enterprise applications.
Hands-on understanding of LLMs, retrieval-augmented generation (RAG), document intelligence, structured extraction, and AI-assisted analytical workflows.
Knowledge of AI evaluation, hallucination mitigation, evidence attribution, model governance, and human-in-the-loop validation.
Strong foundation in cloud architecture, APIs, data pipelines, secure software development, and modern engineering practices.
Ability to design systems that preserve evidence provenance, support reproducible analysis, and produce auditable outputs.
Leadership and Business Alignment
Experience leading technical strategy, software development, and cross-functional engineering initiatives.
Ability to translate complex cybersecurity and GRC concepts into clear product requirements and business-relevant outcomes.
Strong product judgment, balancing technical sophistication, analytical reliability, development speed, and commercial value.
Experience building or leading technical teams in cybersecurity, GRC, enterprise SaaS, or AI-driven software environments.
Familiarity with M&A due diligence, corporate development, private equity, or investment risk assessment is highly desirable.
Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related discipline, or equivalent practical experience.

Work arrangement
Yes