Deputy Chief Information Security Officer
$235,000–$270,000 year
Remote · United States
Job Summary
Deputy Chief Information Security Officer responsible for partnering with the CISO to scale Sardine's security program across application security, GRC, security operations, cloud and SaaS security, corporate IT, and customer trust. The role involves identifying highest-risk areas, supporting compliance initiatives (PCI, SOC 2, ISO 27001, DORA, FedRAMP readiness), incident response support as deputy incident lead, collaboration with Engineering on secure SDLC, vulnerability management, threat modeling, and remediation, and translating complex security concepts into clear business language for enterprise customers. The position emphasizes a pragmatic security culture that enables the business, with extensive cross-functional collaboration (Legal, Sales, Engineering, Product, People, IT) and customer-facing security conversations. Location is remote within the United States; travel approximately 1–2 months per year in North America and potential international travel.
Required Qualifications
- 10–15+ years of cybersecurity experience including 3+ years in a senior leadership or director-level role
- Broad security background across multiple domains
- Strong application security experience
- Experience in startups/scale-ups or resource-constrained environments
- Knowledge of compliance frameworks such as SOC 2, PCI DSS, ISO 27001, GDPR, CCPA, DORA, and FedRAMP (preferred)
- Customer-facing communication skills
- Ability to lead security incidents and coordinate with Legal, Sales, Engineering, Product, People, and IT
- US-based and authorized to work in the US without sponsorship
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.