Chief Information Security Officer

Compass • New York, NY

10h • $350,000 - $400,000

About The Position

Compass International Holdings is seeking a seasoned Chief Information Security Officer to own and evolve the enterprise security program. This is an executive & highly technical role at the intersection of security strategy, technology, and business — responsible for protecting Compass's platform, its agents, buyers, sellers, and the sensitive financial and personal data that flows through every transaction. The CISO will report directly to the CTO and serve as the company's foremost authority on information security, risk management, and compliance. This leader will partner across Engineering, Product, Legal, and Finance to embed security into the DNA of how Compass builds and operates. You will lead a distributed team of security professionals across multiple time zones to support the organization, our customers, and partners. Your day to day includes mentor and sponsorship, assessment on security and risk management from technical implementations to strategic road maps, and drive key initiatives for Enterprise Technology, Security, and Compliance.

Requirements

• 12+ years of technical experience in software, systems, or security engineering, with a deep command of security architecture and Computer Science fundamentals
• Technical roots preferred — candidates with hands-on engineering or security engineering backgrounds are strongly favored, though exceptional leaders who have built and maintained technical credibility through other means will be considered
• 10+ years of senior security leadership experience within a complex, global technology organization — ideally in a publicly traded company with international scope
• Mastery across multiple security domains with deep expertise in Computer Science and Business Systems
• Demonstrated expertise across the full security stack: AppSec, cloud security, identity, GRC, threat modeling, incident response, and security operations
• Hands-on experience building and operating SOX-compliant programs and deep familiarity with CPRA and related privacy regulations
• Experience in a product-led business, ideally a web product responsible for hosting and protecting sensitive customer data at scale
• Cloud-native/SaaS-first fluency — deep familiarity operating in modern infrastructure environments (AWS, GCP, or Azure) with a security posture built for cloud from the ground up
• Data and metrics-driven approach to risk — ability to quantify, prioritize, and communicate security risk using a structured, evidence-based framework
• Track record of translating security strategy into measurable business value, with a data-first approach to communicating risk to non-technical stakeholders
• Ability to operate and prioritize in a high-velocity, high-complexity environment where the business model spans technology, brokerage, and financial services
• Proven ability to build, scale, and lead high-performing security teams across multiple time zones
• Strong executive presence and communication skills; experience presenting to Boards, regulators, and external partners on matters of security and risk

Nice To Haves

• Real estate or adjacent industry experience is a plus, not a requirement

Responsibilities

• Design and drive a comprehensive, enterprise-wide information security and risk management program — covering integrity, confidentiality, and availability of all data owned, processed, or controlled by Compass and its affiliates, including Title & Escrow, Brokerage, and Technology platforms
• Lead all critical security domains: incident response, application security, threat intelligence, monitoring and detection, security engineering, information governance, and product security
• Establish and maintain SOX-compliant internal controls and ensure ongoing CPRA compliance, with direct accountability to audit and regulatory requirements
• Build and continuously mature a distributed team of security professionals, including performance management, succession planning, and organizational development
• Serve as the primary security voice to the Board, executive leadership, regulators, investment partners, and external customers — including public defense of the company's security posture when required
• Define the security roadmap and operating model for a company that spans agents, buyers, sellers, and technology platforms across the full real estate transaction lifecycle
• Partner closely with Engineering and Product to ensure all applications and services are built on secure-by-default principles across people, processes, and technology
• Strengthen third-party and vendor security controls as Compass scales its ecosystem of affiliated businesses and technology integrations

Benefits

• Participation in our incentive programs (which may include eligible cash, equity, or commissions)
• paid vacation
• holidays
• sick time
• parental leave
• recharge leave
• medical
• tele-health
• dental
• vision benefits
• 401(k) plan
• flexible spending accounts (FSAs)
• commuter program
• life insurance
• disability insurance
• Maven (a support system for new parents)
• Carrot (fertility benefits)
• UrbanSitter (caregiver referral network)
• Employee Assistance Program
• pet insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Education Level: No Education Listed