SVP, Chief Information Security Officer

Attain Finance • ,

24d • $250,000 - $325,000

About The Position

The SVP, Chief Information Security Officer (CISO) will serve as Attain Finance's senior-most authority on information security, owning the strategy, execution, and governance of all security functions across the organization. Partnering closely with the Chief Technology Officer and reporting to the Chief Legal and Administrative Officer, the SVP, CISO will align security capabilities with the firm's growth objectives while managing risk in a highly regulated financial services environment.

Requirements

• 15+ years of progressive experience in information security, with at least 5 years in a senior leadership role, ideally within financial services, asset management, or private credit
• Deep knowledge of cybersecurity frameworks and standards, including NIST CSF, ISO 27001, SOC 2, and CIS Controls
• Demonstrated experience managing security in cloud-native or hybrid environments, with familiarity with AWS, Azure, or GCP security architectures
• Strong understanding of the regulatory landscape relevant to financial services, private credit and/or investment management, including SEC, FINRA, and applicable data privacy laws
• Proven ability to communicate complex security risks to non-technical stakeholders, including boards and investors
• Bachelor's degree in Computer Science, Information Security, or a related field

Nice To Haves

• Experience building and scaling security programs in growth-stage or mid-market financial firms is strongly preferred
• Relevant certifications such as CISSP, CISM, or CRISC are preferred
• advanced degree preferred

Responsibilities

• Optimize, implement, and continuously mature an enterprise-wide information security strategy, framework, and roadmap aligned with Attain Finance's business objectives and risk appetite
• Partner with the CTO to integrate security into technology architecture, infrastructure decisions, software development practices, and vendor selection
• Lead and develop a high-performing security team spanning domains such as security operations, vulnerability management, identity and access management, and data protection
• Own the firm's security risk management program, including risk assessments, control gap analysis, and remediation planning across all business lines and technology environments
• Improve and maintain a robust incident response capability, including detection, containment, recovery, and post-incident review processes
• Partner with the Chief Compliance Officer to ensure compliance with applicable regulatory requirements and industry frameworks, including the FTC Safeguards Rule
• Serve as the security liaison to the Board of Directors, executive leadership, investors, and external auditors, providing clear and actionable reporting on the firm's security posture
• Manage third-party and vendor risk, ensuring that security requirements are embedded in procurement, contracting, and ongoing oversight processes
• Champion a firm-wide security awareness and training program that builds a proactive security culture across all employees and business functions
• Evaluate and manage the security technology stack, ensuring investments are effective, scalable, and aligned with the threat landscape
• Stand up and lead a proactive threat hunting program — build the team, tooling, and playbooks to actively search for threats across our environment rather than waiting on alerts, and mature it from ad-hoc hunts to a repeatable, intel-driven capability.
• Build out an internal offensive security (red team) function — establish in-house ethical hacking, penetration testing, and adversary emulation to continuously probe our own systems, applications, and controls for weaknesses before attackers do.

Benefits

• Flexible Paid Time Off Program
• Medical
• Dental
• Vision
• Life Insurance
• Disability
• other voluntary coverages
• 401k program, starting on the first of the month following 30 days of employment with a company match

What This Job Offers

• Job Type: Full-time
• Career Level: Senior