Chief Information Security Officer (CISO) (Remote - US) at Jobgether

, , United States -

Full Time

Start Date

Immediate

Expiry Date

08 Feb, 26

Salary

240000.0

Posted On

10 Nov, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security, Compliance, Risk Management, Identity And Access Management, Role-Based Access Control, Cloud Security, Risk Assessments, Security Audits, NIST 800-171, CMMC, HIPAA, Communication Skills, Documentation Skills, Collaboration, Security Awareness Training, Software Development Lifecycles

Industry

Internet Marketplace Platforms

Description

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Chief Information Security Officer (CISO) in United States. This role offers a strategic and hands-on leadership opportunity to guide the organization’s information security, compliance, and risk management programs. The CISO will ensure that security practices align with business objectives, regulatory requirements, and emerging threats. You will collaborate closely with executive leadership, engineering teams, and project managers to integrate security into operations and product delivery. This position combines technical expertise, strategic vision, and strong relationship-building to maintain a secure, compliant, and resilient organization. The CISO will also serve as a trusted advisor, influencing security policies and shaping a culture of risk awareness across the company. Accountabilities: Lead the design, implementation, and operation of information security and compliance programs. Maintain and enhance compliance with regulatory frameworks such as NIST 800-171, CMMC Level 2, and HIPAA. Represent the organization in security audits, risk assessments, and communications with external assessors. Partner with executive leadership to maintain security clearance requirements and operational integrity. Administer and enforce identity and access management (IAM), role-based access control (RBAC), and cloud security policies across platforms like AWS, Azure, and GCP. Conduct risk assessments, report findings, and recommend mitigation strategies to leadership. Develop and maintain internal security policies, ensuring they are practical, actionable, and understood across the organization. Deliver security awareness training and collaborate on integrating security into project planning and client-facing operations. Active security clearance or eligibility to obtain one. Hands-on experience with IAM, RBAC, and security operations in cloud environments (AWS, Azure, GCP). Proven success leading security audits, compliance assessments, and organizational risk management initiatives. Ability to interpret regulations and translate them into technical and business requirements. Deep understanding of NIST 800-171 compliance requirements and frameworks. Strong communication and documentation skills, capable of explaining complex security concepts in plain language. Experience mitigating organizational vulnerabilities and embedding security into software development lifecycles. Proven ability to foster collaboration across technical and non-technical teams in a professional services environment. Passion for public service and improving outcomes through secure and compliant technology. Nice-to-have qualifications: Experience with CMMC, HIPAA, or FISMA frameworks. Hands-on administration of Google Workspace and infrastructure-as-code. Professional development experience in programming languages. Prior civic tech or remote-team experience. Competitive salary range: $170,000–$240,000 USD. Medical, dental, and vision insurance coverage. Short-term and long-term disability insurance, life and AD&D insurance. Flexible paid-time-off policy (~25 days/year) plus 11 federal holidays. 401(k) match up to 10% with no vesting period. Paid parental leave up to 12 weeks. Performance-based rewards, including annual bonuses, spot bonuses, and stock options. Professional development allowance and tech-related budget. Charity donation matching program. Flexible, remote-friendly work environment. Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching. When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly: 🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements. 📊 It compares your profile to the job’s core requirements and past success factors to determine your match score. 🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role. 🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed. The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role. Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team. Thank you for your interest! #LI-CL1

Responsibilities

Lead the design, implementation, and operation of information security and compliance programs while ensuring alignment with business objectives and regulatory requirements. Collaborate with executive leadership and technical teams to integrate security into operations and product delivery.