Chief Information Security Officer

Our customers trust us with their operating cash, their cards, their payroll, and their cross-border payments. Keeping that money and data safe is one of the most important things we do. We're hiring our first CISO to own security across the whole company. You'll be responsible for the product, the infrastructure, our people, our vendors, and our relationships with bank partners and auditors. This is not a policy-and-slide-deck role. You'll write threat models, review architecture, and get hands-on when it matters. You'll also build the team and program that let Slash scale to many times its current size without slowing down. You'll report to CTO and work closely with engineering, compliance, legal, risk, and our partner banks.

Responsibilities

Own Slash's security strategy and program end-to-end; Build and lead the security team, starting with a Security Engineering hire; Secure a platform that moves real money, including card issuing and PCI DSS, ACH and wire flows, stablecoin payments, treasury, working capital, and the public API; Lead account-security and anti-takeover work, including MFA and passkeys, session and device security, rate limiting, and admin and permission controls; Set the approach for securing AI agents and automation that act on customer accounts; Own cloud and infrastructure security posture across AWS and Cloudflare; Build and run incident response, including playbooks, on-call process, and customer, partner, and regulatory communication; Own compliance frameworks and audits, including SOC 2 Type II and PCI; Support partner-bank oversight reviews, due diligence, examinations, and enterprise customer security reviews; Stand up third-party and vendor risk management; Run pen testing, the bug bounty program, and red-team exercises; Brief leadership and the board on security risk in plain language

Requirements

10+ years in security; Meaningful time leading security at a fintech, payments company, bank, or crypto company; Builder's track record of standing up and scaling a security program from an early stage; Deep technical credibility, including reviewing auth flows with senior engineers and explaining risk to a board; Hands-on experience with PCI DSS and SOC 2; Experience with the security expectations of sponsor banks and FFIEC-style examinations; Strong cloud security experience, ideally AWS; Good judgment about tradeoffs; Calm and decisive during incidents

Nice to have

Experience securing crypto or stablecoin infrastructure; Experience with card issuing programs; Experience with global and multi-entity payment operations; Experience as a founder; Early security leader experience at a company that went through a big growth arc

Benefits

Competitive salary + equity; High autonomy + ownership culture; Comprehensive health, dental, and vision benefits; Free lunch every day, and dinner if you stay past 9 PM; Unlimited PTO