[All remote jobs](https://jobicy.com/jobs.md)[![TITAN logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/81b82aeb-221.png)](https://jobicy.com/company/titan.md)[TITAN](https://jobicy.com/company/titan.md)

# Chief Information Security Officer (CISO), RFA

AI Summary RFA is seeking a senior CISO to own internal and client-facing cybersecurity for financial-services organizations. The role leads GRC, SOC, and vCISO teams while developing managed security services, incident response capabilities, and AI governance offerings. The CISO will advise client executives on regulatory readiness, investor DDQs, and security risk, while ensuring RFA meets rigorous client security reviews. This is a remote US leadership position reporting to the COO and partnering closely with service delivery, engineering, product, and sales teams. Success combines security outcomes, compliance performance, client retention, and security-services revenue growth.[Apply for this job](#job-application)[View company](https://jobicy.com/company/titan.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished13 Nov 2026Apply before13 Dec 2026Listing views33Application actions2Application toolkit

## Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

Opportunity details

## About this role.

About RFA and [Titan](https://jobicy.com/company/titan.md)

RFA is a leading IT and cybersecurity partner to financial services firms: hedge funds, private equity, asset managers, and the firms that serve them. RFA is part of Titan, which is building the AI workforce for IT.

Titan has raised over $100M from General Catalyst, 8VC, and CalPERS, acquired market-leading IT firms like RFA, and put AI agents into production in large enterprises. We’ve automated 100K+ tickets across 800+ customers and are leading the industry in service quality. Our tech team has talent from Scale AI, CoreWeave, Vanta, Dropbox, Meta, FiveRings, TwoSigma, Amazon, Harvard, Stanford, and MIT.

Why this role, why now

AI is changing security faster than anything we’ve seen, and we want RFA to be the one leading it for its clients. RFA’s clients answer to regulators, investors, and DDQs, and they expect their IT partner to be the most security-minded team in the room. With Titan’s AI agents now working alongside RFA’s engineers, we can deliver security that is faster, more thorough, and more proactive than a traditional MSP or MSSP.

We’re looking for a CISO for RFA: a security leader who wants to build security for financial firms from the ground up, with AI at the center of how it’s delivered.

About the role

As RFA’s CISO, you own security for RFA and its clients. You lead RFA’s GRC, SOC, and vCISO teams, act as the senior security advisor to client leadership, and make sure RFA itself holds up to the scrutiny of the most demanding funds. You’ll report to RFA’s COO and work closely with RFA’s service delivery and engineering teams, and with Titan’s product and engineering teams.

You own and measure success by client outcomes (incidents prevented and contained, audits and DDQs passed), growth and retention of RFA’s security revenue, and an RFA that passes every client security review.

This role is remote (US).

In this role you will

*

Set RFA’s security strategy and lead RFA’s GRC, SOC, and vCISO teams, who report to you

*

Build and run RFA’s client security offering: vCISO, managed detection and response, SOC, vulnerability management, email security, and incident response, with AI agents doing the volume and people doing the judgment

*

Be the trusted security advisor to client CFOs, COOs, and CCOs: board and investment committee updates, regulatory readiness (SEC, FINRA, Reg S-P, state privacy rules), and investor DDQs

*

Lead incident response for RFA clients, from first alert to client communication and lessons learned

*

Own RFA’s own security and compliance program, including SOC 2 and the security questionnaires clients send us

*

Work with Titan’s engineers to make sure the AI agents working in client environments are safe: least-privilege access, guardrails, logging, and audit trails

*

Guide RFA clients adopting Claude, ChatGPT, and Copilot on AI governance: data boundaries, connector and permission review, shadow AI discovery

*

Join sales cycles as RFA’s security voice: win the client’s CISO or CCO, and turn what we learn into packaged services and pricing

You might thrive in this role if you

*

Bring 10+ years in security, including leading a security function or practice as CISO, VP, or Head of Security

*

Have built or run security services at an MSP, MSSP, or security consultancy, ideally serving financial services firms

*

Know what hedge funds, PE firms, and asset managers need from security: SEC cybersecurity rules, Reg S-P, investor DDQs, and frameworks like NIST CSF, SOC 2, and ISO 27001

*

Are hands-on with Microsoft 365, Entra ID, Intune, Defender, and modern EDR, SIEM, and email security stacks

*

Are excited, not threatened, by AI agents doing security work, and have opinions on how to make them safe

*

Can explain risk to a fund COO in plain language and to an engineer in technical detail

*

Take extreme ownership and would rather build the program than inherit one

Bonus

*

CISSP, CISM, CISA, or CRISC

*

vCISO experience across multiple financial services clients

*

Experience securing LLM applications or AI governance work (e.g., ISO/IEC 42001, NIST AI RMF)

Logistics

Location: Remote (US)

Travel: Under 5%, for occasional client meetings and time with the team in NYC

Show more

[Apply now >](https://jobicy.com/jobs/161782-chief-information-security-officer-ciso-rfa.md)

>  Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md)

*

![Upload CV](data:image/svg+xml;base64,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)

### Upload your resume now

To unlock remote work opportunities and be discovered by global employers.

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

## Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

### Job Complexity

5/5EasyHard

### Pace & Pressure

5/5RelaxedFast-paced

### Autonomy Level

5/5GuidedFull ownership

### Communication Load

5/5IndependentCollaborative

AI insightThis is an executive-level security leadership role spanning internal security, client delivery, incident response, regulatory compliance, and commercial support. It requires deep financial-services expertise and the ability to make high-stakes decisions across multiple client environments.

## Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate$300,000US market range (per year)$240k–$400k0$440.00k

AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer compensation was disclosed. The yearly cadence and USD market estimate are inferred from the US-based, full-time executive CISO scope, financial-services specialization, and responsibility for both internal and client security programs.

## Core skills

Skills and capabilities most closely associated with this opportunity.

[Cybersecurity Strategy](https://jobicy.com/jobs?search_keywords=Cybersecurity%20Strategy.md)[Information Security Leadership](https://jobicy.com/jobs?search_keywords=Information%20Security%20Leadership.md)[GRC](https://jobicy.com/jobs?search_keywords=GRC.md)[Security Operations Center](https://jobicy.com/jobs?search_keywords=Security%20Operations%20Center.md)[vCISO Services](https://jobicy.com/jobs?search_keywords=vCISO%20Services.md)[Incident Response](https://jobicy.com/jobs?search_keywords=Incident%20Response.md)[NIST Cybersecurity Framework](https://jobicy.com/jobs?search_keywords=NIST%20Cybersecurity%20Framework.md)[SOC 2](https://jobicy.com/jobs?search_keywords=SOC%202.md)[ISO 27001](https://jobicy.com/jobs?search_keywords=ISO%2027001.md)[SEC Cybersecurity Compliance](https://jobicy.com/jobs?search_keywords=SEC%20Cybersecurity%20Compliance.md)[Microsoft 365 Security](https://jobicy.com/jobs?search_keywords=Microsoft%20365%20Security.md)[Microsoft Entra ID](https://jobicy.com/jobs?search_keywords=Microsoft%20Entra%20ID.md)[SIEM](https://jobicy.com/jobs?search_keywords=SIEM.md)[AI Governance](https://jobicy.com/jobs?search_keywords=AI%20Governance.md)[Financial Services Security](https://jobicy.com/jobs?search_keywords=Financial%20Services%20Security.md)

Sample interview questionsHow would you build a scalable security offering for hedge funds, private equity firms, and asset managers?I would start by segmenting client needs and defining repeatable service packages around vCISO advisory, GRC, MDR, vulnerability management, email security, and incident response. Each package would map controls to applicable regulations, investor DDQs, and frameworks such as NIST CSF and SOC 2, with measurable service-level and risk-reduction outcomes.

Describe your approach to leading a material security incident for a financial-services client.

I would establish containment and evidence preservation immediately, activate a clear incident command structure, and provide timely client communications tailored to executive and technical audiences. After recovery, I would lead root-cause analysis, validate corrective actions, and convert lessons learned into improved detections, controls, and client playbooks.

How would you govern AI agents operating in client environments?

I would apply least-privilege access, strong identity controls, segmentation, human approval for high-impact actions, comprehensive logging, and continuous testing of agent behavior. Governance would include data-classification rules, connector reviews, audit trails, monitoring for misuse, and documented accountability aligned to frameworks such as NIST AI RMF.

How do you communicate cybersecurity risk to a fund COO or CCO?

I translate technical exposure into business impact, likelihood, regulatory implications, and recommended decisions. I use concise risk reporting that identifies ownership, remediation cost, timeframes, and residual risk, while retaining detailed technical evidence for engineering teams.

What metrics would you use to measure success in this CISO role?

I would track incident detection and containment performance, vulnerability remediation, audit and DDQ outcomes, control coverage, client risk reduction, service retention, security revenue growth, and client satisfaction. For internal operations, I would also measure security review results, identity and endpoint posture, and the effectiveness of AI-agent guardrails.

Next step

## Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Keep exploring

## Related remote jobs.

*
![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png)
UpGuard Nov 13  New

### [Staff Security Engineer (Product & Cloud)](https://jobicy.com/jobs/161789-staff-security-engineer-product-cloud.md)

Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk…

*
![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp)
Nebius Nov 13  New

### [Detection & Response Engineer](https://jobicy.com/jobs/161755-detection-response-engineer-2.md)

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from…

*
![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)
Canonical Nov 12  New

### [Linux Cryptography and Security Engineer](https://jobicy.com/jobs/161678-linux-cryptography-and-security-engineer.md)

This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and…

*
![Latent logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/c872d1ae22b7-221.webp)
Latent Nov 12  New

### [Security Engineer](https://jobicy.com/jobs/161597-security-engineer-7.md)

About Latent Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engine…

*
![Workleap logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b84329e1-221.png)
Workleap Nov 12  New

### [Staff Security Operations Specialist, LeapSec](https://jobicy.com/jobs/161595-staff-security-operations-specialist-leapsec.md)

Company Description Workleap is a Montreal-based tech company, founded in 2006. We’re builders at heart, we make simple products that actually matter to the people who use them. We have…

*
![Samsara logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/dd26f5ca-221.jpg)
Samsara Nov 12  New

### [Senior Security Engineer – Enterprise Security](https://jobicy.com/jobs/161583-senior-security-engineer-enterprise-security.md)

Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of…

*
![Bogaard Group International logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/1ccf014fc152-221.webp)
Bogaard Group International Nov 12  New

### [Lead Security Systems Solutions Engineer](https://jobicy.com/jobs/161571-lead-security-systems-solutions-engineer.md)

Position Overview We are looking for an experienced Lead Security Systems Solutions Engineer to be embedded at a leading global technology and entertainment company. The Lead Security Systems Solutions Engineer…

*
![Dropbox logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200923071227-398427.jpg)
Dropbox Nov 12  New

### [Security Engineer, IAM](https://jobicy.com/jobs/161544-security-engineer-iam.md)

Role Description Security Engineers at Dropbox safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to…

*
![Fleetio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/07/e571b83c37e0ed5371754d319be16e76.jpeg)
Fleetio Nov 12  New

### [Senior Security Operations Engineer](https://jobicy.com/jobs/161527-senior-security-operations-engineer-5.md)

A little about us…Fleetio is a modern software platform that helps thousands of organizations worldwide manage their fleet operations. Transportation technology is a hot market, and we’re leading the charge…

*
![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png)
TRM Labs Nov 12  New

### [Senior Blockchain Intelligence Analyst, Ransomware](https://jobicy.com/jobs/155136-senior-blockchain-intelligence-analyst-ransomware.md)

Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build…

[Browse all jobs](https://jobicy.com/jobs.md)