CISO

As CISO, you will own Rain's security governance, risk, and compliance strategy, with a particular focus on ISO certification and regulatory readiness, while partnering closely with engineering, infrastructure, legal, and operations teams.

Requirements

• Own and drive Rain's information security and compliance strategy, with a primary focus on ISO 27001 (and related standards) readiness, certification, and ongoing maintenance
• Serve as the executive owner for security compliance programs (e.g., ISO 27001, SOC 2, vendor risk, customer security reviews)
• Design, implement, and continuously improve Rain's security governance framework, including policies, standards, and risk management processes
• Partner closely with Engineering, Infrastructure, Product, Legal, and Operations to embed compliance and security requirements into technical and business workflows
• Lead and manage external audits, certifications, and assessments, acting as the primary point of contact for auditors and assessors
• Translate regulatory, customer, and partner security requirements into practical, scalable controls that align with Rain's architecture and operating model
• Own the risk management lifecycle, including risk identification, assessment, prioritization, and executive reporting
• Establish and track security and compliance metrics, reporting posture, progress, and risk to executive leadership and the board as needed
• Oversee incident response governance, ensuring policies, playbooks, and escalation paths meet compliance and regulatory expectations

Benefits

• Unlimited time off
• Flexible working
• Easy to access benefits
• Retirement goals
• Equity plan
• Rain Cards
• Health and Wellness