Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Chief Information Security Officer role.
Rezi rewrites your resume against Slash Financial's job description. Free.
Tailor your resume to this Chief Information Security Officer role.
Rezi rewrites your resume against Slash Financial's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Chief Information Security Officer posting at Slash Financial — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Chief Information Security Officer posting at Slash Financial — free, in seconds.
About the Role
Slash is hiring its first Chief Information Security Officer (CISO) to own security across the entire company, including product, infrastructure, personnel, vendors, and partner relationships. This is a hands-on role responsible for threat modeling, architecture review, and building a scalable security program. The CISO will report to the CTO and collaborate with engineering, compliance, legal, and risk teams.
Responsibilities
- Own Slash's security strategy and program end-to-end, determining priorities and build vs. buy decisions.
- Build and lead the security team, including recruiting Security Engineering hires.
- Secure a platform handling real money, including card issuing, PCI DSS, ACH/wire flows, stablecoin payments, treasury, working capital, and APIs.
- Lead account security and anti-takeover initiatives, including MFA, passkeys, session security, rate limiting, and admin controls.
- Define security approaches for AI agents and automation, including permissions, guardrails, and auditability.
- Manage cloud and infrastructure security posture on AWS and Cloudflare, covering identity, access, secrets management, logging, detection, and response.
- Develop and manage incident response processes, including playbooks, on-call procedures, and communication.
- Oversee compliance frameworks and audits (SOC 2 Type II, PCI), and support partner bank reviews and customer security assessments.
- Establish third-party and vendor risk management for banking, crypto, lending, and infrastructure partners.
- Manage penetration testing, bug bounty programs, and red-team exercises, ensuring timely remediation of findings.
- Brief leadership and the board on security risks.
Requirements
- 10+ years in security, with significant experience leading security at a fintech, payments company, bank, or crypto company.
- Proven track record of building and scaling a security program from an early stage through hypergrowth.
- Deep technical credibility with the ability to review technical details and explain risks to leadership.
- Hands-on experience with PCI DSS and SOC 2.
- Experience with the security expectations of sponsor banks and FFIEC-style examinations.
- Strong cloud security experience, preferably AWS, in a fast-paced engineering environment.
- Excellent judgment regarding tradeoffs, enabling security as a facilitator rather than a blocker.
- Ability to remain calm and decisive during security incidents.
- Bonus: Experience securing crypto or stablecoin infrastructure, card issuing programs, or global payment operations.
- Bonus: Experience as a founder or early security leader at a rapidly growing company.
Skills
- Security Strategy
- Security Program Management
- Team Leadership
- Platform Security
- Card Issuing
- PCI DSS
- ACH/Wire Flows
- Stablecoin Payments
- Treasury Security
- Working Capital Security
- API Security
- Account Security
- Anti-Takeover
- MFA
- Passkeys
- Session Security
- Device Security
- Rate Limiting
- Admin Controls
- AI Agent Security
- Automation Security
- Cloud Security (AWS)
- Infrastructure Security
- Identity and Access Management
- Secrets Management
- Logging
- Detection and Response
- Incident Response
- Compliance Frameworks
- SOC 2
- Third-Party Risk Management
- Vendor Risk Management
- Penetration Testing
- Bug Bounty Programs
- Red Teaming
- Risk Communication
- FFIEC Examinations
- Crypto Security
- Global Payment Operations
Location
- San Francisco
Work Type
- Full-time
- Onsite
Experience Level
- 10+ years of security experience
- Leadership experience
Salary/Compensations
- Competitive salary + equity
Benefits
- Comprehensive health, dental, and vision benefits
- Free lunch daily
- Dinner provided if working past 9 PM
- Unlimited PTO
About the Company
- Slash is building the future of business banking with industry-specific financial infrastructure.
- Founded in 2021, Slash is a fast-growing fintech company powering over $10B in annual business purchasing.
- The company has raised $100M in Series C funding from investors including Ribbit Capital, Khosla Ventures, Goodwater Capital, NEA, and Y Combinator.
- Headquartered in San Francisco, Slash fosters a strong in-person culture.