Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Chief Information Security Officer role.

Rezi rewrites your resume against Decentralized Masters's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Chief Information Security Officer posting at Decentralized Masters — free, in seconds.

About the Role

Catalyst Capital is hiring its first Chief Information Security Officer to own security across every brand in the group. You will set the strategy, build the program, and personally run the response when something goes wrong. This is a player-coach role, with about half hands-on work and leading a small team of engineers. You will report to Group leadership and brief them monthly, serving as the trusted advisor for risk communication and decision-making under pressure.

Responsibilities

Own the security strategy, roadmap and budget across all brands.
Report security posture, top risks and trends to leadership monthly.
Own incident response end-to-end, including leading during live incidents and coordinating with external parties.
Maintain IR runbooks and conduct tabletop exercises.
Own identity and access management across the group, including SSO, MFA, and least-privilege roles.
Set the AWS security baseline.
Assess the security of all vendors and data providers.
Set standards for platform and customer account security.
Own email security, staff training, and phishing simulations.
Run brand protection initiatives to find and take down fake domains and accounts.
Write and enforce security policies.
Prepare the company for SOC 2 or ISO 27001 with Legal & Compliance.
Own the public security and trust story.
Manage and develop security engineers, deciding on in-house versus outsourced solutions.
Supply security content for member scam-awareness messaging.
Build and maintain a living inventory of the company's entire attack surface.
Design and run AI-driven systems for automated security tasks.
Own the security stack (SIEM, endpoint protection, etc.) and ensure usable logs.
Use AI to triage alerts and hunt across security logs.
Set standards for secure AI development and usage.
Secure AI agents and automations, including prompt-injection defense and monitoring.
Review high-risk agents before launch.

Requirements

10+ years in security, with 3+ years leading a security function (CISO, Head of Security, or equivalent) at a company of 100+ people.
Experience leading live incident response, including executive briefings during incidents.
Proven experience building or rebuilding a security program from an early stage.
Demonstrated daily use of AI agents for security tasks (detections, code review, documentation, policy drafting).
Proficiency in AI-specific risks such as prompt injection, over-scoped agent permissions, and credential/data exposure.
Hands-on experience with cloud security (AWS preferred), identity and access management, SIEM, endpoint protection, and email security.
Ability to write code for scripts, tooling, and automation.
Experience in crypto, fintech, or other high-fraud industries.
Deep knowledge of phishing, social engineering, and impersonation attacks.
Thoroughness with documentation, contracts, and vendor security terms.
Ability to brief executives in plain language, train non-technical staff, and write effective policies.
Comfortable with a player-coach role, spending approximately half the time hands-on.
Ability to lead a fully remote team across multiple time zones.

Skills

Security Strategy
Roadmap Development
Budget Management
Incident Response
Cloud Security (AWS)
Identity and Access Management (IAM)
Vendor Risk Management
Phishing Defense
Policy Development
Compliance (SOC 2, ISO 27001)
AI-driven Security
Attack Surface Management
Agentic Systems
SIEM
Endpoint Protection
Email Security
Secure AI Development
AI Agent Security
Prompt Injection Defense
Coding (Scripting, Tooling, Automation)
Crypto Security
Fintech Security
Social Engineering Defense
Impersonation Attack Defense
Brand Protection
Risk Management
Executive Briefing
Team Leadership

Location

Globally distributed

Work Type

Fully remote
Independent Contractor

Experience Level

10+ years in security
3+ years leading a security function

Education Level

CISSP (preferred)
CISM (preferred)
GCIH (preferred)
OSCP (preferred)

Benefits

Competitive compensation package
Team offsites (Dubai, Costa Rica, etc.)
Collaborative, forward-thinking culture

About the Company

Catalyst Capital is a profitable, bootstrapped holding company building a diversified financial services group.
The group includes education, publishing, software, wealth and tax planning tools, investment products, and proprietary trading technology.
The company is funded entirely from its own operating cash and has never taken outside capital.
Decentralized Masters, a DeFi education business, serves as the primary cash engine, growing to over 150 people, 4,500+ paying members, and approximately $48.6M in FY26 revenue at ~25% earnings before tax in four years.