{"id":2976030,"url":"https://alion.io/job/empirical-empirical-ciso","title":"Empirical - Fractional CISO","company":{"id":107653,"name":"Empirical","domain":"empirical.agency","url":"https://alion.io/company/empirical","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":76,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":94,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":78000,"max_usd":177000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3940},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anthropic","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GitHub","optional":false},{"name":"Google Workspace","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"HIPAA","optional":true}],"status":"live","first_seen_at":"2026-10-21T01:19:05Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-24T19:55:47Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Overview\nApplication\nIMPORTANT: At the moment we are only considering candidates located in Latin America. Please do not apply if you are not located in Latin America.\nAbout Empirical\nEmpirical empowers early and growth stage tech companies to create the right products in the right way by providing two pivotal services:\nProduct & Technology Leadership: Our clients entrust critical decisions to our network of top-tier US-based CTOs and CPOs. We provide fractional, project, or advisory based support, combining highly experienced talent with a flexible approach.\n\nProduct Development Teams: We provide our clients with high performing, senior product development talent through a scalable staff augmentation model and ongoing support. We focus on Latin America to find exceptional talent, with time zone and cultural compatibility.\n\nWe are proud to be a people first company, where we prioritize building meaningful, long lasting human connections with clients and team members alike, while embracing diversity and uniqueness. With this foundation and our focus on talent, we help create great products that people love.\nOur values\nCare about people first\n\nStrive to add value always\n\nLead with integrity\n\nHave fun every step of the way\n\nThe Opportunity\nThis role is with Empirical itself. We're a fully remote team of around 40-50 software engineers across Latin America, with co-founders based in San Diego. Our clients, including healthcare companies and marketing agencies serving financial-industry accounts, now contractually require written security policies consistent with FTC guidance, 24-hour breach notification, approved-subprocessor controls, cyber insurance and annual audits.\nWe're looking for a fractional security leader to build and maintain our security program. Our environment is lean: Google Workspace for SSO and identity, SaaS tools, GitHub and Anthropic Enterprise. We host almost no infrastructure of our own, since our engineers typically work inside client environments. Some company-issued Macs are managed with MDM, and our policies are currently informal.\nThe engagement starts with a gap assessment and a thin layer of policies and Workspace hardening, then grows toward SOC 2 as the business justifies it. We need someone who can phase the work sensibly rather than roll out a full enterprise program on day one.\nWhat you'll do\nRun an initial security gap assessment across our people, tools and processes\n\nDraft and maintain security policies, incident response plans and risk assessments\n\nHarden our Google Workspace environment against the CIS benchmark\n\nStrengthen MFA and identity management, MDM and remote wipe, centralized logging and vulnerability management\n\nPrepare the company for client audits and vendor security questionnaires\n\nReview client MSA and security addendum language, including liability caps, breach terms and subprocessor clauses\n\nDefine secure-coding and DevSecOps practices for engineers working in client repositories\n\nBuild a phased roadmap toward SOC 2 that fits our size and budget\n\nYour qualifications and experience\nMust haves\nExperience helping US software development or IT services companies, such as staff augmentation firms, dev shops or consultancies, not only SaaS or enterprise companies\n\nTrack record standing up security programs from near-zero and preparing small companies (20-100 people) for client audits and vendor questionnaires\n\nHands-on experience with SOC 2 Type 2, NIST CSF and CIS Controls, and the judgment to know when a lighter framework is the right starting point\n\nExperience with Google Workspace hardening (CIS benchmark), MDM/remote wipe, MFA/identity management, centralized logging/SIEM and vulnerability management\n\nAbility to draft policies, incident response plans and risk assessments, and to review client MSA and security addendum language\n\nComfortable with DevSecOps and secure-coding practices for engineers working in client repositories\n\nCISSP, CISM or equivalent certification\n\nAdvanced English required.\n\nFamiliarity with AI tools.\n\nNice-to-haves\nExperience with remote, distributed or LATAM-based teams\n\nFamiliarity with HIPAA/healthcare and financial-services client requirements\n\nExperience working alongside fractional CTOs\n\nWhat we expect from you\n100% alignment with our core values!\n\nAbility to take ownership of projects from start to finish\n\nStrong collaboration and communication skills\n\nAttention to detail and a passion for delivering high-quality work\n\nWhat we offer\nRemote/flexible work\n\nHighly competitive compensation in US dollars\n\nOpportunities for personal and professional development; mentorship, coaching and training as needed\n\nOngoing, fractional dedication\n\nThe opportunity to be part of an amazing, multicultural community of tech experts\n\nWhy work with us?\nWe pride ourselves on our core values and have proven that putting people first creates a thriving and collaborative work environment.\n\nWe seek to accommodate and balance individual needs with client needs, understanding each one of us is unique.\n\nWe offer benefits such as remote/flexible work, selective paid training, mentorship programs, referral programs and more.\n\nWe are selective in the projects we take on to ensure our teams are engaged in challenging, meaningful, enjoyable opportunities that will provoke creativity, innovation and growth!","description_format":"text","description_chars":5350,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule","Professional development"],"hiring_locations":[{"name":"Argentina","iso":"AR","kind":"region"},{"name":"Brazil","iso":"BR","kind":"region"},{"name":"Colombia","iso":"CO","kind":"region"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Anguilla","iso":"AI","kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"Bolivia","iso":"BO","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Chile","iso":"CL","kind":"region"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"Ecuador","iso":"EC","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Falkland Islands","iso":"FK","kind":"region"},{"name":"French Guiana","iso":"GF","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Guyana","iso":"GY","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Paraguay","iso":"PY","kind":"region"},{"name":"Peru","iso":"PE","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":"VC","kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Suriname","iso":"SR","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"Uruguay","iso":"UY","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Search Engine Optimization (SEO)","Web Development Services"],"lifecycle":[{"event":"open","at":"2026-10-21T04:46:55Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":94,"reasons":["conf:2","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/empirical-empirical-ciso","json_url":"https://alion.io/job/empirical-empirical-ciso.json","meta":{"generated_at":"2026-10-24T22:17:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32638,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":107653},"rest":"https://alion.io/mcp/rest/get_company?id=107653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fempirical-empirical-ciso"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fempirical-empirical-ciso"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fempirical-empirical-ciso"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/empirical-empirical-ciso\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fempirical-empirical-ciso"}]}