Chief Information Security Officer

Job Summary

Leading the security strategy and program for the organization, the full-time remote Chief Information Security Officer (CISO) will manage risk assessment, incident response, and security framework implementation while advising leadership on material security risks.

Key responsibilities

• Own and implement the Foundation's security strategy across various domains, including protocol, infrastructure, and applications
• Build and manage a security risk-management program, maintaining a risk register and presenting investment priorities to leadership
• Lead security engagement with institutional counterparties, overseeing security assessments and incident response coordination

Required qualifications

• 8+ years of security experience with demonstrated accountability for security functions, including risk management and executive reporting
• Experience implementing NIST CSF 2.0 or equivalent security frameworks to set priorities and verify control improvements
• Direct security ownership of live on-chain systems or assets, with knowledge of DeFi lending failure modes
• Strong understanding of smart contract audits, vulnerability management, and secure deployment practices
• Experience leading responses to high-severity security incidents, ideally involving on-chain exploits