Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 36 hours ago

Information Security Lead

Acquisition.com16 open roles

Pay
$200,000 – $225,000 a year
Where
Remote, USA
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security LeadAcquisition.com · Remote, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Acquisition.com's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.8% of postings close within 7 days. Measured by our own scanner across the market. Acquisition.com postings stay open a median of 37 days.

Share of postings closed within
  1. 1.9%1 day
  2. 3.9%3 days
  3. 9.8%7 days
  4. 15.6%14 days
  5. 33.9%30 days
This job: posted 36 hours ago

Acquisition.com median: 37 days open

The posting

ROLE

The Information Security Lead exists to make security an operating discipline across ACQ, with clear ownership for information security operations, incident readiness, risk, and the ongoing operation of ISO 27001 and ISO 42001.

ACQ holds data from thousands of client businesses and uses AI across its products and internal operations. We've established foundational identity controls, and we're moving from certification readiness into the daily work of keeping our management systems effective, our risks visible, and our response capabilities ready.

This is a hands-on, founding information security role with its deepest ownership in GRC and security operations. You will build repeatable operating systems, lead investigations, and provide an independent view of risk. You will also bring enough technical depth to review application and infrastructure code, understand attack paths, and work with engineering owners on practical code remediation.

You will report to the IT Systems Manager, partner daily with platform, application, and AI engineering, collaborate with Legal on privacy, and work with the CTO as an executive sponsor of the function.

RESPONSIBILITIES

- Operate the ISO 27001 and ISO 42001 management systems through continuous evidence collection, risk management, control testing, internal audits, management reviews, corrective actions, and surveillance audit preparation.

- Build and run security operations across centralized logging, detection engineering, alert triage, incident response, security investigations, insider-risk escalation, tabletop exercises, and post-incident improvement.

- Own the information security operating model, including policies, standards, risk acceptance, vulnerability governance, quarterly leadership reporting, security awareness, and the roadmap for maturing the function.

- Lead identity, access, vendor, and data-protection controls through privileged-access governance, quarterly reviews, third-party assessment, classification, retention, deletion, and clear boundaries between operating companies.

- Provide independent technical assurance across applications and cloud systems by reviewing architecture, application code, infrastructure-as-code, IAM policies, CI/CD workflows, and material vulnerabilities with the engineers who own remediation.

- Establish security and governance controls for AI systems, including inventories, impact assessments, model and tool access, agent permissions, prompt-injection and data-exfiltration risks, audit trails, and tested shutdown mechanisms.

REQUIREMENTS

- 7+ years of information security experience, including experience operating ISO 27001 programs. Active CISSP certification, or eligibility and commitment to obtain it within six months of hire, is required; ISO 42001 and CGRC experience are preferred.

- Experience remediating security incidents, including practical experience building logging, monitoring, and detection capabilities.

- Ability to read and write code, ideally in Python and JavaScript/TypeScript, to identify potential attack paths, assess vulnerabilities, and recommend code-level fixes.

- Proficiency with infrastructure-as-code tools such as Pulumi or Terraform, cloud IAM, and deployment workflows.

- Knowledge of AI and agentic systems, with experience establishing practical security controls for their use.

- Experience serving as a foundational or sole information security owner is highly preferred.

RESULTS

- ISO 27001 and ISO 42001 operate on a continuous cadence, with current evidence, tested controls, reviewed risks, and corrective actions ready for surveillance audits.

- Security signals are centralized and actionable, incident procedures are rehearsed, investigations are handled with clear ownership, and lessons produce verified control improvements.

- Leadership receives a plain-language quarterly view of material risk, overdue remediation, control effectiveness, accepted exceptions, and the decisions or investment required.

- Privileged access is reviewed quarterly, identity lifecycle controls are auditable, critical vendors are assessed before receiving company data, and data-handling expectations are implemented in the systems that matter.

- Application and cloud findings have named engineering owners and deadlines, technical reviews happen early enough to change designs, and remediation is validated rather than closed on assertion.

- AI systems have a current inventory, defined owners and access boundaries, completed impact assessments, traceable activity, tested shutdown controls, and a prioritized plan for scaling the information security function.

SCHEDULE

- Full-time, standard Pacific Time business hours, Monday through Friday.

- Flexibility to support security incidents and critical business needs.

LOCATION

- Remote, USA.

- Some travel to Las Vegas will be required.

COMPENSATION

- $200,000-$225,000 base salary.

- The salary range may be inclusive of several levels applicable to the position. Final salary will be based on a number of factors including level, relevant prior experience, skills, and expertise. This range is inclusive of base salary only and does not include benefits.

BENEFITS:

We offer a comprehensive, evolving benefits package designed to support your health, family, and wellbeing. Some key offerings:

- Flexible Unlimited Paid Time Off and Company-wide Holidays

  • Employer sponsored Medical, Dental, & Vision plans
  • $1,950 annual Employer HSA contribution
  • FSA options including dependent care
  • Employee assistance program and mental health resources

- Employer match program for 401(k), eligible for both Traditional and Roth accounts

- $1,200 annual wellness reimbursement through JOON https://joon.io/ that supports health, family care, pet care, fitness, and more!

- For local or visiting team members, enjoy access to a state of the art gym at our HQ in Las Vegas

* Benefits eligibility applies only to full-time exempt roles.

ACQ CORE VALUES:

Our core values are the heart and soul of this incredible company. The right person for this role will appreciate each of these values, personally subscribe to them, and understand why each is critical to having a great business.

COMPETITIVE GREATNESS

Be at your best when your best is needed. Enjoyment of a hard challenge. Those who have the drive to constantly improve, the superior intellect and long term commitment to see incremental improvements become compounding returns.

SINCERE CANDOR

Have the self awareness to accurately perceive and communicate hard truths that improve others and self, the courage to do so, and the humility to accept them, even when it hurts. Nothing great can be built without feedback: internally or externally.

UNIMPEACHABLE CHARACTER

Be the type of person with whom people are always proud to associate, personally and professionally. We look for true alignment of thoughts, words, and actions towards a goal worth pursuing.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Acquisition.com's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Acquisition.com's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Acquisition.com's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.