Chief Information Security Officer
You will lead Bakkt’s global information security posture, own regulatory cybersecurity compliance, brief executive leadership and the Board, establish security governance for AI and stablecoin infrastructure, implement zero-trust architecture and continuous compliance, integrate security into development pipelines, lead incident response and business continuity, manage third-party risk, and develop a distributed security team.
Responsibilities
- Serve as the designated CISO for the cybersecurity program under NYDFS Part 500
- Oversee annual risk assessments and compliance certification
- Lead cybersecurity incident materiality determinations and regulatory disclosures
- Brief the Board Audit Committee on material security risks
- Align security controls with international mandates including EU DORA, UK FCA, and GDPR
- Establish security governance for autonomous AI agents
- Secure the stablecoin minting, burning, and reserve-management lifecycle
- Implement phishing-resistant authentication and zero-trust principles
- Transition manual GRC to continuous controls monitoring
- Integrate automated security guardrails into development pipelines
- Implement threat modeling based on business impact
- Own incident response and business continuity plans
- Lead systemic-failure and AI-driven-fraud tabletop exercises
- Manage continuous third-party security monitoring
- Lead and develop a distributed security team
Requirements
- CISSP, CISM, CCISO, or CISA credential
- 12+ years of information security experience
- Experience in a NYDFS-regulated or SEC-reporting public company
- Experience leading security in distributed AWS or GCP environments
- Experience with cybersecurity compliance
- Experience with incident response and business continuity
- Experience with stablecoin protocols or AI-driven financial tools is advantageous
- Master’s degree in Cybersecurity, MIS, or MBA is preferred
Benefits
- Remote work