> Markdown version of [/jobs/ext/3101621-chief-information-security-officer-ciso](https://www.wearedevelopers.com/jobs/ext/3101621-chief-information-security-officer-ciso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Chief Information Security Officer (CISO)

- **Company:** Remanence
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software System Penetration Testing, Cloud Computing, Cloud Computing Security, Cyber Security, Customer Data Management, Information Leak Prevention, Monitoring of Systems, Key Management, Secure Coding, Security Information and Event Management, Software Vulnerability Management, Kubernetes
- **Published:** September 27, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=5af8d3201b56a9f5

## About the Role

* Core certifications: ISO 27001 and SOC 2 Type II. You must have led at least one certification or audit end to end.
 * Additional frameworks: Experience with AI, privacy or sector-specific standards such as ISO 42001, ISO 27701, SecNumCloud or HDS is a plus.
 * Regulation: Familiarity with GDPR and the EU AI Act, alongside requirements relevant to regulated customers, such as DORA and NIS2.
 * Security tooling: Compliance automation and monitoring tools such as Vanta, Drata and SIEM platforms.
 * Infrastructure and IT: Kubernetes and cloud security, secrets and key management, identity providers and device management.

About you

You've built security programs at growing software companies and led at least one ISO 27001 certification or SOC 2 audit end to end.
You're comfortable reviewing cloud infrastructure, Kubernetes deployments and infrastructure-as-code. You can turn security requirements into practical engineering controls and explain risk clearly to engineers, customer security teams and procurement.
We welcome experienced security leaders and hands-on engineers ready to step up. Experience with regulated customers, on-prem or BYOC deployments, and compliance automation tools such as Vanta or Drata is valuable.

## Description

* Build our security program and lead ISO 27001 certification and SOC 2 Type II audits, expanding to additional frameworks as needed.
 * Manage compliance requirements, including GDPR and the EU AI Act, alongside sector-specific customer expectations.
 * Work with Platform and Infrastructure teams on secure development, deployment architectures, vulnerability management and penetration testing.
 * Protect customer data, model weights and training trajectories through isolation, encryption and access controls. Address AI-specific risks such as prompt injection and data leakage.
 * Lead customer security reviews, questionnaires and audits, helping unblock enterprise deployments.
 * Own incident response and business continuity, and occasionally support internal IT security, including identity, device management and employee access.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)