Chief Information Security Officer (CISO)

Human Interest is on a mission to ensure that people in all lines of work have access to retirement benefits. 

Nearly half of all working Americans are not saving enough for their future. Too often it’s because they are employed by a company that doesn’t offer a retirement plan. Human Interest is changing that by making it affordable and accessible for small and medium-sized businesses to offer employees a path to financial independence through retirement savings.

We’re a high-growth tech company changing the retirement industry. We’ve raised $500M and are backed by leading investors. Most recently, by funding from BlackRock as well as many other top investors: TPG (The Rise Fund) with SoftBank led our Series D, Glynn Capital, NewView Capital, USVP, Wing, Uncork, and others.

We are seeking a highly-qualified, hands-on, mission-oriented candidate for the position of Chief Information Security Officer (CISO). Reporting to the Chief Technology Officer, the CISO will be responsible for the entirety of Human Interest’s cybersecurity posture, comprising a) Monitoring & Incident Response, b) Security Engineering, and c) Governance, Risk & Compliance.

This CISO will define the fundamental principles and strategy for the protection of Human Interest and its clients’ information resources, develop appropriate controls to ensure compliance with legal/regulatory/commercial requirements, lead education programs targeting employees & clients, hold the company accountable to cybersecurity best practices, and interface directly with the company’s executive leadership & board - all while supporting Human Interest’s business needs and continued rapid growth!

What you get to do every day

• Establish/maintain/evolve the information security program to ensure that information assets are significantly protected.
• Serve as an expert advisor to the Board of Directors and company leadership on cybersecurity across areas like infosec strategy, risks, and delivery of key objectives.
• Build a world-class Information Security team through a focus on high-quality recruiting, attentive coaching/mentoring, and day-to-day leadership of your team.
• Develop a cybersecurity roadmap that reflects long-term thinking, appropriately identifies/prioritizes risks & opportunities, and implements security controls & technologies that raise the bar for cybersecurity.
• Maintain a deep connection to technical, industry, and regulatory trends relating to Information Security and provide your team with direct, actionable guidance.
• Dive deep and provide leadership, as well as hands-on support, to your team in areas such as incident response, third party information security assessments, cloud infrastructure, data protection & encryption, identity & access management, and more.
• Ensure the information security program and controls comply with legal/regulatory requirements, corporate policies, and contractual obligations.
• Assess vendor- or partner-related security risks and establish protocols for managing and monitoring their cybersecurity practices.
• Effectively manage an information security budget, monitor for variances, and make high-quality, timely decisions on resource allocation.

What you bring to the role

• Bachelor's degree in computer science, information technology, or a related field.
• 10+ years of experience in information security and/or related technical areas, with a proven track record of success in developing and implementing information security strategies.
• 5+ years of experience in a technical leadership role, with a track record of recruiting and supporting top-tier employees to realize a high-performing team.
• Extensive knowledge of common information security frameworks and standards, such as ISO/IEC 27001, NIST Cybersecurity Framework (1.1 and Draft 2.0), SOC 1/2/3, etc.