Chief Information Security Officer

About the role

UpGuard, a provider of the Cyber Risk Posture Management platform, is hiring a Chief Information Security Officer. This is not a conventional CISO role: you will own the entire enterprise technology stack, including security and infrastructure, identity, end-user compute, networking, cloud platform and the technology and physical security services behind the workspaces. You will report directly to the CEO, with a defined transition period alongside the outgoing CISO.

Key responsibilities

• Own the full technology and security remit, with no handoffs or shared ownership of outcomes.
• Lead and grow three functions: IT & Security Operations, Cloud Platform Engineering and GRC, coaching existing leaders and keeping the team lean.
• Mature security operations across enterprise and product systems, investing in Google SecOps and n8n automation.
• Own identity end to end: IAM across GCP projects, identity governance, joiner/mover/leaver, entitlement review, privileged access and OAuth consent risk.
• Own the network and cloud perimeter, using ZTNA as the access model and GCP perimeter security and networking.
• Own end-user compute: a predominantly macOS fleet with selective ChromeOS and managed browser services for BYOD, including device provisioning and retrieval.
• Own the workspaces: technology and physical security for offices in Australia and the US.
• Own the compliance program: SOC 2 Type II today, ISO 27001 targeted, the enterprise risk register and security inputs to vendor management and procurement.
• Act as customer zero, using the platform deeply and feeding real operating experience back to Product, Sales and Customer Success.
• Brief the executive team, Steering Committee and Board, and speak credibly to customers and prospects.

Required profile

• A leader who has personally built and operated technology at scale, with security layered over it.
• An infrastructure and operations foundation, such as having run a data centre or operations function.
• Experience in a disciplined, process-oriented environment (e.g. financial services).
• Ability to build and scale capability with limited resources, preferring automation to headcount.
• Hands-on credibility: able to architect controls, review Terraform changes and lead incidents.
• Substantial GCP experience strongly preferred; deep AWS or Azure experience considered.
• Experience owning a compliance program such as SOC 2 or ISO 27001.
• Fast learning, self-directed and comfortable in a fast-paced, remote-first environment.

What we offer

• Monthly lifestyle subsidy and WFH set-up allowance within the first 3 months.
• $1,500 USD annual learning and development allowance.
• PTO plus two extra UpGuardian leave days, 18 weeks paid parental leave, personal leave allowance.
• Fully remote working, with top-spec laptops provided.
• Generative AI subscription subsidy for all team members.