Chief Information Security Officer (CISO)

Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.

Blockchain.com is looking for an experienced Chief Information Security Officer (CISO) to lead our global cyber security organization as we continue to scale and prepare for our next phase of growth, including our journey toward becoming a US public company.

Reporting to the CTO, the CISO will define and execute the company's global cybersecurity strategy, ensuring the security, resilience and integrity of our platform while enabling rapid product innovation. This executive will be a trusted advisor to the leadership team and Board, partnering closely with Engineering, Product, Infrastructure, Legal, Compliance and Finance.

The CISO will oversee the Security Engineering, Security Operations and Security GRC teams and collaborate closely with IT, SRE and the broader engineering team.

WHAT YOU WILL DO

• Define and execute Blockchain.com's global cybersecurity strategy aligned with business objectives and IPO readiness.
• Foster a culture of security across the company by being a strong business-enabler.
• Lead and scale the Security Engineering, SOC and Security GRC organizations.
• Partner with executive leadership and the internal audit team on cybersecurity strategy, enterprise risk and regulatory readiness.
• Strengthen our cloud, application and infrastructure security across a global digital asset platform.
• Devise robust operational flows & technical systems to safeguard client and company funds.
• Drive incident response, security operations, vulnerability management and operational resilience.
• Devise and implement a comprehensive AI governance & safety strategy.
• Maintain and play a role in operating our custody systems.
• Provide tailored, executive-level security assessments to Board meetings, regulators, and examiners to demonstrate operational resilience and risk mitigation effectiveness.
• Ensure compliance with industry standards and frameworks, including SOC 1/2, ISO 2700, ISO 42001, DoRA, SOX and other applicable regulatory requirements.
• Embed security into the software development lifecycle while enabling engineering velocity.

WHAT YOU WILL NEED

• Proven experience as a CISO or senior security executive in a high-growth technology or financial services company.
• Experience leading security within a US public company or through an IPO, with a strong understanding of SOX, SEC cybersecurity requirements and corporate governance.
• Deep technical experience in cryptocurrency, digital assets, blockchain or financial technology.
• Demonstrated success leading global Security Engineering & GRC teams.
• Strong knowledge of cloud security (GCP and AWS), application security, incident response, identity and access management, and modern security architectures.
• Operational experience with self-custody systems (including HSMs), and designing processes to safeguard funds.
• Experience presenting to executive leadership, Boards of Directors and regulators.
• Strong leadership, communication and stakeholder management skills, with the ability to balance security, innovation and business growth.

COMPENSATION & PERKS

• Full-time salary based on experience and meaningful equity in an industry-leading company
• This is a role based in our London office, with a mandatory in-office presence four days per week.
• Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.
• ClassPass 
• Unlimited vacation policy; work hard and take time when you need it
• Apple equipment
• The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field
• Flexible work culture  

Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.

You may contact our Data Protection Officer by email at dpo@blockchain.com. Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf.  Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses. 

Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment.  Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.