> Markdown version of [/jobs/ext/4356467-ciso](https://www.wearedevelopers.com/jobs/ext/4356467-ciso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CISO

- **Company:** RAIN, Inc
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $325,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cloud Engineering, Cyber Security, PCI Data Security Standards
- **Published:** October 31, 2026
- **Apply:** https://www.adzuna.com/details/5579737269

## About the Role

* 8-12+ years of experience in information security, GRC, or security leadership roles, with demonstrated ownership of compliance programs
 * Hands-on experience leading ISO 27001 certification efforts (initial certification and/or ongoing surveillance audits)
 * Experience operating as a security leader in a high-growth, technology-driven company, ideally in fintech, payments, or regulated environments
 * Strong understanding of security governance, risk management, and control frameworks (ISO 27001/27002, SOC 2, NIST, etc.)
 * Proven ability to partner effectively with engineering and technical teams to implement controls in cloud-native and application-driven environments
 * Experience managing third-party risk, customer security questionnaires, and enterprise security reviews
 * Ability to clearly communicate risk, tradeoffs, and priorities to executives and non-technical stakeholders

Nice to have, but not mandatory

 * Experience with additional frameworks such as SOC 2 Type II, PCI DSS, ISO 22301, or regional regulatory requirements
 * Prior experience acting as a first or early security leader at a scaling company
 * Familiarity with cloud security and modern application architectures, even if not hands-on day-to-day
 * Experience supporting global customers or international compliance requirements
 * Security or compliance certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer / Auditor)
 * Experience presenting security posture or risk assessments to boards or executive committees

## Description

As CISO, you will own Rain's security governance, risk, and compliance strategy, with a particular focus on ISO certification and regulatory readiness, while partnering closely with engineering, infrastructure, legal, and operations teams.

 * Own and drive Rain's information security and compliance strategy, with a primary focus on ISO 27001 (and related standards) readiness, certification, and ongoing maintenance
 * Serve as the executive owner for security compliance programs (e.g., ISO 27001, SOC 2, vendor risk, customer security reviews)
 * Design, implement, and continuously improve Rain's security governance framework, including policies, standards, and risk management processes
 * Partner closely with Engineering, Infrastructure, Product, Legal, and Operations to embed compliance and security requirements into technical and business workflows
 * Lead and manage external audits, certifications, and assessments, acting as the primary point of contact for auditors and assessors
 * Translate regulatory, customer, and partner security requirements into practical, scalable controls that align with Rain's architecture and operating model
 * Own the risk management lifecycle, including risk identification, assessment, prioritization, and executive reporting
 * Establish and track security and compliance metrics, reporting posture, progress, and risk to executive leadership and the board as needed
 * Oversee incident response governance, ensuring policies, playbooks, and escalation paths meet compliance and regulatory expectations