Chief Product & Information Security Officer (CPISO)

InvestCloud, Inc. • New York, NY

2d • $350,000 - $375,000

About The Position

InvestCloud is seeking an experienced Chief Product & Information Security Officer (CPISO) to lead the company's global information security strategy, governance, risk management, and incident response capabilities. Uniquely, this role carries explicit ownership of the security of InvestCloud's software products — ensuring that security is embedded by design across the full product development lifecycle, from architecture through to client delivery. The CPISO will partner closely with executive leadership, Product, and Engineering teams, as well as cross-functional stakeholders, to protect InvestCloud's systems, data, and clients while enabling the business to scale securely.

Requirements

• Significant leadership experience in information security, cybersecurity, or related disciplines, including a senior security leadership role with a clear track record of influencing executive-level decision-makers
• Demonstrated experience in product or application security, with a strong understanding of secure SDLC practices, application security (SAST/DAST/SCA), and DevSecOps
• Strong knowledge of security governance, security operations, incident response, risk management, identity and access management, and regulatory compliance
• Demonstrated ability to communicate effectively with executive stakeholders, boards, auditors, clients, and technical teams
• Experience building and leading security programmes in complex, regulated, and technology-enabled environments — ideally within financial services or enterprise software
• Strong judgment, credibility, and the ability to balance risk management with business enablement and product velocity
• Bachelor's degree required

Nice To Haves

• advanced degree or relevant certifications (e.g. CISSP, CISM, CSSLP) preferred

Responsibilities

• Define and lead the enterprise information security strategy, policies, standards, and controls — spanning both corporate infrastructure and InvestCloud's software product suite
• Own product security across the full software development lifecycle (SDLC), including secure design principles, application security testing, vulnerability management, and secure-by-default standards for all client-facing products
• Partner with Product and Engineering leadership to embed security requirements into product roadmaps, architecture reviews, and release processes
• Oversee security operations, incident response, and the ongoing development of the company's incident response programme and CSIRT
• Provide regular security reporting, metrics, and risk updates to executive leadership and governance forums, including product-specific security posture
• Drive security, regulatory, and audit readiness across the organisation, including compliance with relevant financial services and data protection frameworks
• Partner with Technology, Legal, Compliance, Privacy, and Business leaders to ensure security requirements are embedded into operations and decision-making
• Lead and develop a high-performing security team — encompassing both product security and information security disciplines — and ensure the function is appropriately resourced
• Evaluate emerging threats, manage cyber risk, and strengthen security capabilities across cloud, platforms, data, product, and third-party environments

Benefits

• medical/Rx, dental, vision, disability, and life/AD&D insurance plans
• Flexible Savings Account (FSA)
• Health Savings Account (HSA)
• Employee Assistance Plan (EAP)
• health advocacy
• voluntary ancillary plans (accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance)
• 401(k) retirement savings plan with company match
• paid time off

What This Job Offers

• Job Type: Full-time
• Career Level: Executive