Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 16 days ago

Chief Information Security Officer

Slash17 open roles

Where
San Francisco Office
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowChief Information Security OfficerSlash · San Francisco Office

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Slash's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.5% of postings close within 7 days. Measured by our own scanner across the market. Slash postings stay open a median of 37 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.5%7 days
  4. 15.5%14 days
  5. 33.9%30 days
This job: posted 16 days ago

Slash median: 37 days open

The posting

CHIEF INFORMATION SECURITY OFFICER (CISO)

San Francisco Office · Full-time

About Slash

Slash is building the future of business banking, one industry at a time. We think businesses deserve financial infrastructure built around how they actually operate. That's why we combine what businesses expect from a bank (high yields, strong rewards, serious security) with industry-specific tools that make them faster, leaner, and more profitable.

Slash was founded in 2021 and is one of the fastest-growing fintechs in the world. We power over $10B a year in business purchasing. We recently raised a $100M Series C led by Ribbit Capital, with participation from Khosla Ventures, Goodwater Capital, NEA, and Y Combinator. We're headquartered in San Francisco and have a strong in-person culture.

About the role

Our customers trust us with their operating cash, their cards, their payroll, and their cross-border payments. Keeping that money and data safe is one of the most important things we do.

We're hiring our first CISO to own security across the whole company. You'll be responsible for the product, the infrastructure, our people, our vendors, and our relationships with bank partners and auditors. This is not a policy-and-slide-deck role. You'll write threat models, review architecture, and get hands-on when it matters. You'll also build the team and program that let Slash scale to many times its current size without slowing down.

You'll report to CTO and work closely with engineering, compliance, legal, risk, and our partner banks.

What you'll do

- Own Slash's security strategy and program end-to-end. That includes deciding what matters most, what to build versus buy, and what we can safely leave for later.

- Build and lead the security team, starting with our Security Engineering hire, and recruit a small group of exceptional engineers.

- Secure a platform that moves real money. Scope includes card issuing and PCI DSS, ACH and wire flows, stablecoin payments, treasury, working capital, and our public API.

- Lead account-security and anti-takeover work, including MFA and passkeys, session and device security, rate limiting, and admin and permission controls. Partner with fraud and risk teams on the threats that sit between security and fraud.

- Set the approach for securing AI agents and automation that act on customer accounts. Define permissions, guardrails, auditability, and abuse prevention for autonomous financial actions.

- Own cloud and infrastructure security posture across AWS and Cloudflare, including identity and access, secrets management, logging, detection, and response.

- Build and run incident response. Own the playbooks, the on-call process, and customer, partner, and regulatory communication when something goes wrong.

- Own our compliance frameworks and audits, including SOC 2 Type II and PCI. Support partner-bank oversight reviews, due diligence, and examinations, and answer enterprise customer security reviews.

- Stand up third-party and vendor risk management across our banking, crypto, lending, and infrastructure partners.

- Run pen testing, the bug bounty program, and red-team exercises, and make sure findings actually get fixed.

- Brief leadership and the board on security risk in plain language.

What we're looking for

- 10+ years in security, with meaningful time leading security at a fintech, payments company, bank, or crypto company, where the stakes were real money.

- A builder's track record. You've stood up a security program from an early stage and scaled it through hypergrowth.

- Deep technical credibility. You can go line by line through an auth flow with a senior engineer, and then explain the risk to our board in five minutes.

- Hands-on experience with PCI DSS and SOC 2, and with the security expectations of sponsor banks and the FFIEC-style examinations they run.

- Strong cloud security experience, ideally AWS, in a modern engineering environment that ships quickly.

- Good judgment about tradeoffs. You make security the fast path for engineers, not the blocker.

- Calm and decisive during incidents.

- Bonus: experience securing crypto or stablecoin infrastructure, card issuing programs, or global and multi-entity payment operations. Also a plus: you've been a founder, or an early security leader at a company that went through a big growth arc.

What's in it for you

- Build the security function at one of the fastest-growing fintechs in the world, with real ownership and a direct line to leadership

- Competitive salary + equity

- High autonomy + ownership culture

- Comprehensive health, dental, and vision benefits

- Free lunch every day, and dinner if you stay past 9 PM

- Working out of our downtown San Francisco office

- Unlimited PTO

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Slash's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Slash's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Slash's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.