> Markdown version of [/jobs/ext/3052672-ciso](https://www.wearedevelopers.com/jobs/ext/3052672-ciso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CISO - **Company:** Strategic Inc - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $150,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Artificial Intelligence, Amazon Web Services, Apple Mac Systems, Software System Penetration Testing, Microsoft Azure, Big Data, Software as a Service, Cloud Computing, Configuration Management, Programming Tools, Identity and Access Management, Microsoft Security Essentials, Azure Active Directory, Software Engineering, Data Streaming, Software Vulnerability Management, EndPointSecurity, Data Logging, Multi-Agent Systems, Performance Monitor, Gsuite - **Published:** September 24, 2026 - **Apply:** https://www.builtincolorado.com/job/ciso/11344007?handler=ApplyRedirect ## About the Role * Experience operating at CISO, Deputy CISO, Head of Security, or equivalent scope in a high-growth technology company. Experience building a security program during an early stage of growth is strongly preferred. * Deep technical understanding of cloud, identity, endpoint, application, product, and infrastructure security. You can engage directly with engineers on architecture, threat models, control implementation, and remediation. * Experience securing cloud-first environments and modern identity and device ecosystems, including platforms such as AWS, Azure, or GCP; Google Workspace or Microsoft Entra ID; and macOS and Windows device management. * Strong command of incident response, vulnerability management, security monitoring, third-party risk, data protection, and secure software development practices. * Experience building and maintaining security assurance or compliance programs such as SOC 2, ISO 27001, or FedRAMP, and supporting the diligence requirements of sophisticated enterprise or government customers. * A current understanding of security risks created by AI systems, employee use of generative AI, autonomous agents, sensitive data flows, and rapidly changing development tools. * Sound risk judgment and a practical operating style. You know when to insist on a control, when to accept or escalate risk, and how to design a solution the organization can sustain. * The ability to move comfortably between strategy and execution. You are willing to investigate an issue, review a design, write or refine a policy, answer a customer question, and establish a longer-term program. * Strong communication skills with technical teams, executives, board members, customers, auditors, and partners. You explain risk clearly, without relying on fear or unnecessary complexity. * A low-ego, highly collaborative approach and the ability to build trust across functions while holding a high bar for security and accountability. ## Description Be an Early Applicant Remote Hiring Remotely in USA Entry level Remote Hiring Remotely in USA Entry level Lead Ent's internal security program across people, systems, infrastructure, product development, and company data. Set security strategy, manage risk, establish cloud and endpoint controls, lead incident response, embed security into software development, and oversee SOC 2, ISO 27001, FedRAMP, audits, and customer diligence. Build the security team and operating model while advising executives, the board, customers, and partners on security risks and priorities., We are seeking a hands-on Chief Information Security Officer to build and lead Ent's internal security program as we scale. You will own the security of our people, systems, infrastructure, product development environment, and company data. You will work closely with our founders and leaders across Engineering, Product, Legal, People Operations, IT, and Go-to-Market to make clear, risk-based decisions and earn the trust of large enterprise and government customers. This is an internal security leadership role with meaningful customer-facing responsibility. Because Ent is building AI-native endpoint security, you will need deep technical credibility, strong operating judgment, and the ability to turn high security standards into practical controls that protect the company without slowing the team down. You will set the strategy, personally drive the highest-priority work, and build the team and operating model Ent needs for its next stage. What You'll Achieve * Set Ent's company-wide security strategy and roadmap, with priorities, ownership, and measurable outcomes that reflect our stage, risk profile, and customer commitments. * Serve as a hands-on security leader. Personally drive critical assessments, control design, remediation, and incident work while building a focused internal team and using outside partners where they add leverage. * Own security risk across identities, employee endpoints, SaaS applications, cloud infrastructure, company data, the software supply chain, and third-party vendors. * Partner with Engineering and Product to embed security into architecture and the software development lifecycle, including threat modeling, secure design reviews, vulnerability management, secrets and dependency management, logging, monitoring, and remediation. * Establish and continuously improve core controls for identity and access management, device security, privileged access, data protection, configuration management, and employee onboarding and offboarding across Ent's cloud-first environment. * Build and lead incident response, including detection and escalation processes, investigation, containment, communications, tabletop exercises, post-incident reviews, and improvements to business continuity and disaster recovery. * Lead Ent's security assurance and compliance program. Translate requirements from frameworks and programs such as SOC 2, ISO 27001, FedRAMP, and customer-specific standards into durable controls, with clear judgment about what Ent needs now and what can come later. * Own customer and partner security diligence, including questionnaires, audits, penetration tests, security reviews, and security commitments in contracts. Partner with Legal and Go-to-Market to respond accurately and efficiently. * Create clear, usable policies and security education that help employees make good decisions, including guidance for sensitive data, approved AI tools, and emerging risks from AI agents and automation. * Use Ent's product internally as part of the company's security program and provide structured feedback to Product, Engineering, and Research based on real operating experience. * Give the executive team and board a clear view of Ent's risk, readiness, incidents, and investment priorities, and represent Ent credibly in strategic customer security conversations when needed., Serves as an outsourced CISO for multiple clients while leading SGP's internal cybersecurity and compliance program. Responsibilities include NIST, CMMC, and ISO 27001 alignment; security assessments; risk reviews; SSPs, POA&Ms, audits, incident response, vulnerability management, executive reporting, security training, and compliance monitoring. The role also manages assessment partners, subcontracted vCISOs, client proposals, scalable GRC methodologies, and security reviews for business initiatives. Top Skills: Business IntelligenceC3PaoCisaCmmcErpFbiIso/Iec 27001Nist Sp 800-171Nist Sp 800-53NocPlans Of Action And Milestones (Poa&Ms)RpoSocSystem Security Plans (Ssps) Eon.io CISO One Month Ago Remote US Expert/Leader Expert/Leader Big Data * Cloud * Big Data Analytics Own Eon's enterprise security strategy, governance, risk, compliance, engineering, operations, and customer trust programs. Build and lead the security organization, manage SOC 2, ISO 27001, NIST, and FedRAMP readiness, oversee detection and incident response, partner with Engineering and Product on secure design, and represent security to executives, the board, regulators, enterprise customers, and industry stakeholders. Top Skills: CloudCloud InfrastructureData ProtectionFedrampInfrastructure SecurityIso 27001NistSaaSSecure Software Development LifecycleSoc 2StaterampVulnerability Management Afterpay ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) - [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)