{"id":2429584,"url":"https://alion.io/job/campfire-chief-information-security-officer","title":"Chief Information Security Officer","company":{"id":6809,"name":"Campfire","domain":"campfire.ai","url":"https://alion.io/company/campfire","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":85,"open_postings":37,"ghost_share":0,"stale_share":0.595,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":226000,"max_usd":482000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":155},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GDPR","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-13T06:07:27Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-15T18:21:30Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Campfire\nCampfire is a next-gen core accounting platform built for modern mid-market finance teams. We’re building the future of ERP by replacing outdated systems and manual accounting processes with an AI-native platform that helps finance teams move faster and operate more efficiently.\nThe role\nCampfire is hiring its first full-time CISO to own security, compliance and customer trust as we sell to larger enterprises.\nCampfire is an AI-native ERP and financial automation platform. We raised a $65M Series B led by Accel and Ribbit Capital.\n\nCustomers trust us with their general ledger, bank details, payroll and vendor data.\n\nToday, security is run by a fractional vCISO firm plus a few engineers. Deals are increasingly gated on security reviews.\n\nYou will turn that into an in-house program that closes deals faster and keeps us safe.\n\nWhat you'll own\nCustomer security reviews and deal support\nAnswer security questionnaires, TPRMs and RFPs (SIG, CAIQ, custom) with a fast, predictable turnaround.\n\nJoin customer and prospect calls with CIOs and IT security teams, including implementation kickoffs.\n\nMaintain a trust center and security collateral pack: policies, pentest reports, network architecture, insurance certificate.\n\nCompliance and audits\nOwn SOC 1 and SOC 2 (Type I and II): scope, auditor management, bridge letters, and customer follow-up questions.\n\nDecide and lead the path to ISO 27001, ISO 42001 and other frameworks customers ask about.\n\nRun Vanta as the system of record for controls and evidence.\n\nPrivacy and contracts\nPartner with Legal on DPAs, BAAs, GDPR transfer mechanisms (SCCs / DPF), DORA and non-US privacy laws.\n\nReview security and audit-cooperation clauses in customer contracts.\n\nOwn data retention, export and residency answers, including new-region or GovCloud requests.\n\nSecurity operations and incident response\nOwn the incident response plan, run tabletop tests, and lead response when incidents happen.\n\nOwn customer breach notification decisions and post-incident write-ups.\n\nOwn detection and email security: SIEM, EDR, email protection, identity alerting.\n\nIdentity and access\nOwn Okta (SSO, phishing-resistant MFA, SCIM), MDM and least-privilege access to production.\n\nSupport customer-facing SSO/SCIM setups.\n\nResilience and policy\nOwn BCDR plans, RTO/RPO targets, backup and restore testing.\n\nMaintain information security, responsible AI and vendor management policies.\n\nRun background and sanctions screening for employees and vendors.\n\nAI security\nAnswer customer questions on our AI assistant: underlying models, prompt and response retention, logging, and opt-out.\n\nGovern AI vendors and subprocessors.\n\nFirst 90 days\nTake over customer security reviews from the vCISO firm and set a clear intake and turnaround process for Sales.\n\nFinish the Vanta migration and publish a trust center with standard collateral.\n\nFinalize and test the BCDR and incident response plans.\n\nClose out post-incident hardening: email security, Okta alerting, MDM and EDR coverage.\n\nPresent a 12-month security and certification roadmap to the CTO.\n\nWhat we're looking for\n10+ years in security, with 3+ leading a program at a B2B SaaS company.\n\nHas owned SOC 1 / SOC 2 audits end to end. ISO 27001 experience a plus.\n\nComfortable on calls with enterprise CIOs and auditors, and enjoys helping close deals.\n\nHands-on with AWS, Okta, Google Workspace, EDR and SIEM tooling.\n\nWorking knowledge of GDPR, DPAs and contract security terms.\n\nHas led real incident response, including customer communication.\n\nFintech, ERP or accounting software background a strong plus.\n\nPragmatic builder: starts as a team of one, hires as we grow.\n\nReporting and logistics\nReports to the CEO. Works closely with Sales, Legal and Engineering.\n\nLocation: Bay Area preferred.","description_format":"text","description_chars":3796,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["ERP & Business Management Software","Accounting & Tax Software"],"lifecycle":[{"event":"open","at":"2026-10-13T08:32:30Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2 · green card filings: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":2,"median_offered_wage_usd":112500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/campfire-chief-information-security-officer","json_url":"https://alion.io/job/campfire-chief-information-security-officer.json","meta":{"generated_at":"2026-10-15T19:46:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30027,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6809},"rest":"https://alion.io/mcp/rest/get_company?id=6809"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcampfire-chief-information-security-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcampfire-chief-information-security-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcampfire-chief-information-security-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/campfire-chief-information-security-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcampfire-chief-information-security-officer"}]}