Rain

6 months ago

CISO

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Own Rain’s security governance, risk, and compliance strategy, with a primary focus on ISO 27001 readiness, certification, and ongoing maintenance. Serve as executive owner for security compliance programs such as ISO 27001 and SOC 2, manage vendor risk and customer security reviews, and design governance and risk management frameworks. Lead external audits and translate regulatory and customer security requirements into practical controls across engineering, infrastructure, legal, and operations.

Location: New York

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: CXO level

Key Responsibilities

•Own and drive Rain’s information security and compliance strategy, focused on ISO 27001 readiness, certification, and ongoing maintenance.
•Serve as executive owner for security compliance programs including ISO 27001, SOC 2, vendor risk, and customer security reviews.
•Design, implement, and continuously improve the security governance framework, including policies, standards, and risk management processes.
•Partner with engineering, infrastructure, product, legal, and operations to embed compliance and security requirements into workflows.
•Lead and manage external audits, certifications, and assessments as the primary point of contact for auditors and assessors.

Pay and Benefits

Salary: USD 50,000 - 999,000 annually

Equity and Bonus:Equity

Perks:Paid LeaveFlexible WorkHealth InsuranceDentalVisionLife Insurance401kEquity

Key Requirements

•8–12+ years in information security, GRC, or security leadership with demonstrated ownership of compliance programs.
•Hands-on leadership of ISO 27001 certification efforts, including initial certification and/or ongoing surveillance audits.
•Experience operating as a security leader in a high-growth, technology-driven company, ideally in fintech, payments, or regulated environments.
•Strong understanding of security governance, risk management, and control frameworks including ISO 27001/27002, SOC 2, and NIST.
•Proven ability to partner with engineering and technical teams to implement controls in cloud-native and application-driven environments.

Experience:8+ yearsFintechPaymentsRegulated environmentsGRCSecurity leadershipCloud-nativeSaaSCrypto

Skills:LeadershipCross-functional communicationRisk communicationStakeholder managementStrategic governance

Certifications:CISSPCISMISO 27001 Lead ImplementerISO 27001 Lead Auditor

Tech Stack:ISO 27001ISO 27002SOC 2NISTISO 22301PCI DSS

Company Brief

Rain

Website

Loading job details...

Preparing the role view and application actions.

Rain

6 months ago

CISO

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: New York

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: CXO level

Key Responsibilities

•Own and drive Rain’s information security and compliance strategy, focused on ISO 27001 readiness, certification, and ongoing maintenance.
•Serve as executive owner for security compliance programs including ISO 27001, SOC 2, vendor risk, and customer security reviews.
•Design, implement, and continuously improve the security governance framework, including policies, standards, and risk management processes.
•Partner with engineering, infrastructure, product, legal, and operations to embed compliance and security requirements into workflows.
•Lead and manage external audits, certifications, and assessments as the primary point of contact for auditors and assessors.

Pay and Benefits

Salary: USD 50,000 - 999,000 annually

Equity and Bonus:Equity

Perks:Paid LeaveFlexible WorkHealth InsuranceDentalVisionLife Insurance401kEquity

Key Requirements

•8–12+ years in information security, GRC, or security leadership with demonstrated ownership of compliance programs.
•Hands-on leadership of ISO 27001 certification efforts, including initial certification and/or ongoing surveillance audits.
•Experience operating as a security leader in a high-growth, technology-driven company, ideally in fintech, payments, or regulated environments.
•Strong understanding of security governance, risk management, and control frameworks including ISO 27001/27002, SOC 2, and NIST.
•Proven ability to partner with engineering and technical teams to implement controls in cloud-native and application-driven environments.

Experience:8+ yearsFintechPaymentsRegulated environmentsGRCSecurity leadershipCloud-nativeSaaSCrypto

Skills:LeadershipCross-functional communicationRisk communicationStakeholder managementStrategic governance

Certifications:CISSPCISMISO 27001 Lead ImplementerISO 27001 Lead Auditor

Tech Stack:ISO 27001ISO 27002SOC 2NISTISO 22301PCI DSS

Company Brief

Rain

Website