About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies take control of the cryptographic identities that safeguard every digital interaction. Behind the platform is a global team of people who care deeply about the work and each other.

We move fast, think big, and show up for one another every day. If you're looking for work that matters and a team that brings out your best, we hope you'll trust your future with Keyfactor! Title: Chief Information Security Officer Location: United States; Remote, EST Experience: Executive Job Function: Executive Employment Type: Full-time Industry: Computer and Network Security About the position The Chief Information Security Officer (CISO) is responsible for defining and executing Keyfactor’s enterprise-wide security strategy to safeguard customer data, product integrity, and corporate assets,.

This role provides strategic leadership in building and maintaining a robust internal security posture, encompassing governance, risk management, compliance, and secure operations, while also serving as the external face of security to customers, partners, and regulators. The CISO ensures that Keyfactor’s security practices inspire confidence, support business growth, and maintain industry-leading standards in digital trust and identity management. Applicants must be legally authorized to work in the United States.

Responsibilities

Strategic Leadership Develop and implement a comprehensive enterprise security strategy that protects internal systems, operations, and corporate assets while reinforcing customer trust externally.

Requirements

Collaborate with product, engineering, and business teams to embed security design principles and practices across all Keyfactor offerings. Represent Keyfactor externally to customers, partners, industry forums, and regulators to strengthen trust, demonstrate compliance, and communicate security commitments. IT Strategy and Operations Develop and execute the organization's IT strategy to support business objectives, ensuring the reliability, security, and scalability of technology services.

Lead the planning, implementation, and management of enterprise applications, network operations, cloud services, data management, and end-user support. Partner with executive leadership and business stakeholders to identify opportunities to leverage technology that improve operational efficiency, enhance customer experiences, and drive innovation across the organization. Manage IT budgets, vendor relationships, and technology roadmaps to ensure cost-effective, scalable delivery of technology services.

Maintain robust disaster recovery capabilities and business continuity plans to protect organizational assets and minimize operational risk. Monitor emerging technologies and industry trends, recommending solutions that strengthen organizational performance and support long-term growth. Security Operations and Governance Lead enterprise security operations, including threat detection, incident response, vulnerability management, and proactive risk mitigation.

Maintain and continuously improve the Information Security Management System (ISMS), driving adherence to ISO 27001, SOC 2, FedRAMP, and emerging standards such as ISO 42001 for AI. Define and enforce security policies, procedures, and standards that ensure both internal resilience and external assurance for clients and partners. Risk Management and Compliance Conduct enterprise-wide risk assessments, audits, and reviews to identify, quantify, and mitigate security threats internally and across customer-facing services.