Rain
CISO
$250K–$325K
New York, NY · On-site · Full-time · Posted Jan 15, 2026
- Experience
- 8–12+ years; no alternatives stated.
About the job
Leads Rain’s information security governance, risk, and compliance strategy, focusing on ISO 27001 readiness, certification, and ongoing regulatory and audit readiness.
What you'll do
- Own security compliance programs, governance frameworks, risk management, and related executive reporting.
- Lead external audits, certifications, assessments, and customer security reviews.
- Partner with technical and business teams to implement scalable security controls and oversee incident response governance.
What they ask for
- 8–12+ years of experience in information security, GRC, or security leadership, with demonstrated compliance-program ownership.
- Hands-on experience leading ISO 27001 certification efforts, including initial certification and/or surveillance audits.
- Experience as a security leader in a high-growth technology company; fintech, payments, or regulated environments are ideal.
- Strong knowledge of security governance, risk management, and control frameworks, plus experience implementing controls with engineering teams.
Nice to have
- Experience with additional frameworks such as SOC 2 Type II, PCI DSS, ISO 22301, or regional regulatory requirements.
- Security or compliance certifications such as CISSP, CISM, or ISO 27001 Lead Implementer / Auditor.
Pay
USD 250K – USD 325K base salary; equity and bonus offered, amounts not stated.
Tools
ISO 27001, ISO 27002, SOC 2, NIST, PCI DSS, ISO 22301
Model-written summary · the original posting is authoritative