Chief Information Security Officer (CISO)

About Infinite Reality:

Infinite Reality, Inc. provides world-class tools and services that enable creators and companies to develop fully realized immersive experiences. These experiences foster creativity, personal connections, and limitless value for brands looking to shape the future of audience engagement and commercial opportunity. Our vision for an open Metaverse makes each brand, creator, and citizen the master of their digital experiences, their data, and how they distribute content, commercialize their creations, and build communities.

Role Overview:

As the Chief Information Security Officer (CISO) at iR, you'll report directly to the CEO and play a pivotal role in enhancing our information technology (IT) efficiencies and effectiveness while ensuring the confidentiality and integrity of our systems. Working within the Operations division, you’ll work closely with members of the C-Suite, and provide strategic and tactical direction on information security to protect our digital assets and the privacy of our users.

Key Responsibilities:

1. Invisible Security Implementation:

• Develop and implement a formal InfoSec framework, based on industry-leading standards (NIST/ CIS/COBIT), to achieve ISO 27001/SOC2 compliance, that operates seamlessly in the background, undetectable to unauthorized users.
• Create and enforce security policies and procedures that are invisible to the end-user, ensuring compliance with industry standards and best practices.
• Employ cutting-edge technologies to continuously monitor and adapt our security measures to emerging threats, without disrupting user experiences.

• Utilize risk assessment tools to identify potential vulnerabilities and risks within our systems, proactively mitigating threats before they materialize.
• Implement corrective action plans using predictive analytics to address identified issues swiftly and effectively.

• Assess privacy risks when handling partner data, and advice on how to safely handle personal data that cycles through iR immersive experiences
• Act as iR’s data protection officer, to ensure that iR processes personal data of data subjects in compliance with applicable data protection laws.
• Work with business and corporate partners to ensure that privacy and cybersecurity incidents are reported timely and accurately, and assist in determining necessary notifications (including compliance with iR’s reporting obligations as a publicly-traded company)

• Provide strategic guidance on covert security operations, leveraging technologies to detect and neutralize evolving threats without alerting potential adversaries.
• Foster partnerships with industry leaders in cyber security to stay ahead of emerging threats and maintain a covert advantage.

• Develop and lead a security team with precision and discretion, ensuring that our operations remain invisible to unauthorized parties.
• Provide ongoing training and development opportunities to our security personnel, equipping them with the skills and tools needed to operate effectively in the shadows.
• Liaising with IT, HR, and Legal departments to ensure internal personnel are provided adequate cyber security and compliance-related training 

• Interface with executive leadership and key stakeholders, communicating the strategic importance of our covert security initiatives while maintaining operational secrecy.
• Implement an executive risk function to achieve top-down visibility into organizational security posture.
• Contribute to the development of strategic policies and initiatives to safeguard our digital assets and maintain our competitive edge in the marketplace.
  
  

Preferred Qualifications:

1. Minimum of 10 years of experience in information security or cyber security, with a demonstrated track record of implementing security measures.
2. Strong leadership experience in managing security teams within dynamic organizations, with a focus on discretion and operational secrecy.
3. Expertise in leveraging technologies, such as AI, for covert security operations, including advanced algorithms for threat detection and response.
4. Excellent communication skills, with the ability to convey complex security concepts to diverse audiences while maintaining operational security.
5. Certifications such as DoD, IAT, IAM, IASAE, CAP, CASP, CISM, CIPP-US, and/or ITIL are highly desirable.
6. Experience with data protection compliance in the US and EU
   
   

Qualifications:

Minimum entrance requirements include: