> Markdown version of [/jobs/ext/4618124-chief-information-security-officer](https://www.wearedevelopers.com/jobs/ext/4618124-chief-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Chief Information Security Officer

- **Company:** Thrively
- **Location:** Los Angeles, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cyber Security, PCI Data Security Standards, Software Vulnerability Management, Software Security
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25304_9f600f9b3dc25e32250e0b4630835a29

## About the Role

We're looking for an accomplished security leader who is equally comfortable presenting cyber risk to a board and working through an architecture problem with senior engineers., * 15+ years in information security, including significant experience leading leaders across a full security organization.

 * Security leadership in banking, payments or another heavily regulated environment, with responsibility for security across all products and services.
 * A technologist's background: the ability to architect security solutions and stay hands-on, not just manage the people who do.
 * Deep understanding of technical products and the security that surrounds them, including cloud (AWS and/or Azure), identity and application security.
 * Hands-on experience with PCI DSS, along with SOC 1 and SOC 2 programs.
 * A strong track record leading through security incidents and organizational change.
 * Experience presenting to and partnering with a board of directors and executive leadership.
 * A practical, current understanding of AI in cybersecurity, both as a tool and as a risk to govern.
 * Experience managing outside security vendors and owning security and vulnerability testing programs.
 * An active CISSP, CISM or equivalent certification preferred.

## Description

As Chief Information Security Officer, you'll own the strategy, architecture and execution of security across every product and service our client delivers. You'll report to the CTO and work directly with the president and board of directors.

You'll inherit an established team of approximately 20 across security operations, engineering, governance and identity, along with strong SOC 1, SOC 2 and PCI foundations. Your opportunity is to take a solid program and build it into what an independent, fast-moving, heavily regulated fintech needs next.

This is not an ivory-tower role. Our client wants a true technologist who can still architect solutions, get hands-on when it matters and lead from the front during a security incident.

Your mandate: Build a security organization that doesn't just protect the business. It helps the business grow.

What You'll Own:

Security Strategy & Architecture

 * Define and execute a multi-year, risk-based security strategy aligned with the business, its products and its growth plans.
 * Architect security solutions across cloud, identity, network and applications, and stay close enough to the technology to challenge design decisions alongside senior engineers.
 * Understand the company's technical products deeply and build security into how they are designed, built and shipped.
 * Bring an AI-savvy point of view to both sides of security: using AI to strengthen detection and response, and governing how AI is used across the business.

Compliance & Regulatory Partnership

 * Mature and lead PCI DSS, SOC 1 and SOC 2 programs, building on strong existing foundations.
 * Serve as the security point of contact for banking partners, card networks, regulators and enterprise customers.
 * Translate regulatory requirements into practical controls that protect customers without slowing the business down.

Security Operations & Incident Response

 * Own security operations, vulnerability management, and all security and penetration testing.
 * Lead from the front during security incidents, with clear and calm communication to executives and the board.
 * Manage outside security vendors and partners, holding them accountable for measurable risk reduction.

Leadership & Change Management

 * Lead, develop and evaluate an established organization of approximately 20, building leadership bench strength across the team.
 * Hire a Head of Product Security and shape the organization for the company's next stage.
 * Drive the organizational and operating model changes needed as the company establishes itself as an independent business.
 * Deliver clear, candid cyber risk reporting to the president and board of directors.