Campfire
Chief Information Security Officer
San Francisco · On-site · Full-time · Posted Oct 13, 2026
- Experience
- 10+ years in security, with 3+ leading a program at a B2B SaaS company.
About the job
Campfire’s first full-time CISO will build and lead its in-house security, compliance, and customer-trust program to support enterprise sales and protect the company’s platform and data.
What you'll do
- Lead customer security reviews, questionnaires, calls, and trust-center materials to support sales.
- Own SOC 1 and SOC 2 audits, compliance frameworks, privacy and contract security work, and Vanta controls and evidence.
- Lead security operations, incident response, identity and access, resilience, policies, and AI vendor governance.
What they ask for
- 10+ years in security, including 3+ leading a program at a B2B SaaS company.
- Owned SOC 1 / SOC 2 audits end to end.
- Hands-on with AWS, Okta, Google Workspace, EDR and SIEM tooling.
- Working knowledge of GDPR, DPAs and contract security terms; has led real incident response, including customer communication.
Nice to have
- ISO 27001 experience.
- Fintech, ERP or accounting software background.
Tools
Vanta, AWS, Okta, Google Workspace, EDR, SIEM
AI focus
Address customer questions about the AI assistant’s underlying models, prompt and response retention, logging, and opt-out; govern AI vendors and subprocessors; maintain responsible AI policies.
Model-written summary · the original posting is authoritative