Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Chief Information Security Officer role.
Rezi rewrites your resume against Campfire's job description. Free.
Tailor your resume to this Chief Information Security Officer role.
Rezi rewrites your resume against Campfire's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Chief Information Security Officer posting at Campfire — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Chief Information Security Officer posting at Campfire — free, in seconds.
About the Role
Campfire is hiring its first full-time CISO to own security, compliance, and customer trust as we sell to larger enterprises. Campfire is an AI-native ERP and financial automation platform that raised a $65M Series B. Customers trust us with sensitive financial data, and deals are increasingly gated on security reviews. This role will establish an in-house security program to close deals faster and ensure safety.
Responsibilities
- Own customer security reviews and deal support, including answering security questionnaires (SIG, CAIQ, custom) and joining customer calls.
- Maintain a trust center and security collateral pack.
- Own SOC 1 and SOC 2 audits, including scope, auditor management, and customer follow-up.
- Decide and lead the path to ISO 27001, ISO 42001, and other relevant frameworks.
- Run Vanta as the system of record for controls and evidence.
- Partner with Legal on privacy agreements (DPAs, BAAs, GDPR, DORA) and review contract security clauses.
- Own data retention, export, and residency answers.
- Own the incident response plan, conduct tabletop tests, and lead response during incidents.
- Own customer breach notification decisions and post-incident write-ups.
- Own security operations including detection and email security (SIEM, EDR, email protection, identity alerting).
- Own identity and access management (Okta, MDM, least-privilege access) and support customer-facing SSO/SCIM setups.
- Own business continuity and disaster recovery (BCDR) plans, RTO/RPO targets, and backup testing.
- Maintain information security, responsible AI, and vendor management policies.
- Run background and sanctions screening for employees and vendors.
- Address customer questions on AI assistant security, including underlying models, data handling, and governance of AI vendors.
- Take over customer security reviews from the vCISO firm and establish intake and turnaround processes.
- Complete Vanta migration and publish a trust center with standard collateral.
- Finalize and test BCDR and incident response plans.
- Close out post-incident hardening for email security, Okta alerting, MDM, and EDR coverage.
- Present a 12-month security and certification roadmap to the CTO.
Requirements
- 10+ years in security, with 3+ years leading a program at a B2B SaaS company.
- Experience owning SOC 1 / SOC 2 audits end to end.
- Comfortable on calls with enterprise CIOs and auditors.
- Experience with AWS, Okta, Google Workspace, EDR, and SIEM tooling.
- Working knowledge of GDPR, DPAs, and contract security terms.
- Experience leading real incident response, including customer communication.
- Pragmatic builder, capable of starting as a team of one and hiring as the company grows.
Skills
- Security program leadership
- SOC 1/SOC 2 audits
- ISO 27001
- Customer security reviews
- Security questionnaires (SIG, CAIQ)
- Trust center management
- Security collateral development
- Privacy laws (GDPR, DPAs, DORA)
- Contract security review
- Incident response
- Security operations
- SIEM
- EDR
- Email security
- Identity and access management (Okta, SSO, MFA, SCIM, MDM)
- Business continuity and disaster recovery (BCDR)
- Information security policies
- Responsible AI
- Vendor management
- Background and sanctions screening
- AI security
- AWS
- Google Workspace
Location
- Bay Area preferred
Work Type
- Full-time
Experience Level
- 10+ years in security
- 3+ years leading a program
About the Company
- Campfire is a next-gen core accounting platform built for modern mid-market finance teams.
- We’re building the future of ERP by replacing outdated systems and manual accounting processes with an AI-native platform that helps finance teams move faster and operate more efficiently.
- Campfire is an AI-native ERP and financial automation platform.
- We raised a $65M Series B led by Accel and Ribbit Capital.
- Customers trust us with their general ledger, bank details, payroll and vendor data.