Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.

Blockchain.com is looking for an experienced Chief Information Security Officer (CISO) to lead our global cyber security organization as we continue to scale and prepare for our next phase of growth, including our journey toward becoming a US public company.

Reporting to the CTO, the CISO will define and execute the company's global cybersecurity strategy, ensuring the security, resilience and integrity of our platform while enabling rapid product innovation. This executive will be a trusted advisor to the leadership team and Board, partnering closely with Engineering, Product, Infrastructure, Legal, Compliance and Finance.

The CISO will oversee the Security Engineering, Security Operations and Security GRC teams and collaborate closely with IT, SRE and the broader engineering team.

WHAT YOU WILL DO

• Define and execute Blockchain.com's global cybersecurity strategy aligned with business objectives and IPO readiness.
• Foster a culture of security across the company by being a strong business-enabler.
• Lead and scale the Security Engineering, SOC and Security GRC organizations.
• Partner with executive leadership and the internal audit team on cybersecurity strategy, enterprise risk and regulatory readiness.
• Strengthen our cloud, application and infrastructure security across a global digital asset platform.
• Devise robust operational flows & technical systems to safeguard client and company funds.
• Drive incident response, security operations, vulnerability management and operational resilience.
• Devise and implement a comprehensive AI governance & safety strategy.
• Maintain and play a role in operating our custody systems.
• Provide tailored, executive-level security assessments to Board meetings, regulators, and examiners to demonstrate operational resilience and risk mitigation effectiveness.
• Ensure compliance with industry standards and frameworks, including SOC 1/2, ISO 2700, ISO 42001, DoRA, SOX and other applicable regulatory requirements.
• Embed security into the software development lifecycle while enabling engineering velocity.