Chief Information Security Officer

Lead Bakkt’s global information security posture, regulatory cybersecurity compliance, executive and Board reporting, security governance for AI and stablecoin infrastructure, zero-trust architecture, continuous compliance, DevSecOps, incident response, business continuity, third-party risk, and distributed team development.

Responsibilities

• Serve as the designated CISO for the cybersecurity program under NYDFS Part 500.
• Oversee annual risk assessments and compliance certification.
• Lead cybersecurity incident materiality determinations and regulatory disclosures.
• Brief the Board Audit Committee on material security risks.
• Align security controls with EU DORA, UK FCA, GDPR, and other international mandates.
• Establish security governance for autonomous AI agents.
• Secure the stablecoin minting, burning, settlement, and reserve-management lifecycle.
• Implement phishing-resistant authentication and zero-trust principles.
• Transition manual GRC to continuous controls monitoring.
• Integrate automated security guardrails into development pipelines.
• Implement business-impact-based threat modeling.
• Own incident response and business continuity plans.
• Lead systemic-failure and AI-driven-fraud tabletop exercises.
• Manage continuous third-party security monitoring.
• Lead and develop a distributed security team.

Requirements

• CISSP required, or an equivalent executive credential such as CISM, CCISO, or CISA.
• 12+ years of information security experience.
• Experience in a NYDFS-regulated or SEC-reporting public company.
• Experience leading security in distributed AWS or GCP environments.
• Experience with cybersecurity compliance, incident response, and business continuity.
• Stablecoin protocol or AI-driven financial tools experience is advantageous.
• Master’s degree in Cybersecurity, MIS, or MBA is preferred.
• Ability to lead strategically through ambiguity, high-stakes situations, and rapid change.
• Must successfully pass a post-offer background check and drug screen.

Benefits

• Remote work