Deputy Chief Information Security Officer
Sardine
| Company | Sardine |
| Category | Security |
| Location | United States |
| Remote | Remote |
| Employment | Not stated |
| Level | Executive |
| Salary | USD 235k–270k |
| Posted | 13 May 2026 |
| Last verified | 10 Aug 2026 |
| Source | Employer ATS (ashby) |
Description
Who we are:
Sardine is the leading agentic risk platform for fighting financial crime. Our integrated solution unifies data across risk teams to help organizations stop fraud in real time, prevent AI-driven attacks, and automate fraud and AML operations. Sardine’s platform is strengthened by one of the fastest-growing fraud consortiums in the market, spanning more than 6 billion profiled devices, 800 million consumers, and 3 million businesses worldwide. Leading companies including FIS, GoDaddy, Intuit, Edward Jones, ZoomInfo, and Checkout.com rely on Sardine to secure and grow trust in their products.
Our culture:
- We have hubs in the Bay Area, NYC, Austin, Toronto, and São Paulo. However, we maintain a remote-first work culture. #WorkFromAnywhere
- We hire talented, self-motivated individuals with extreme ownership and high growth orientation.
- We value performance and not hours worked. We believe you shouldn't have to miss your family dinner, your kid's school play, friends get-together, or doctor's appointments for the sake of adhering to an arbitrary work schedule.
Location: Remote, United States
Travel: Approximately once every 1–2 months, primarily in North America, with some potential international travel
ABOUT THE ROLE
Sardine is hiring a Deputy Chief Information Security Officer to partner closely with our CISO and help scale our security program as we grow.
This is a senior, high-impact role for a security leader who can operate across multiple areas, including application security, GRC, security operations, cloud and SaaS security, corporate IT, customer trust, and overall security strategy. You’ll serve as a trusted partner to the CISO, help identify and prioritize the highest-risk areas, and represent Sardine’s security program with internal teams, customers, prospects, auditors, and industry stakeholders.
We’re looking for someone who is broad, pragmatic, technically fluent, and comfortable in customer-facing settings. The right person can balance strong security judgment with the pace and trade-offs of a fast-moving startup.
WHAT YOU’LL DO
- Partner with the CISO on Sardine’s overall security strategy, roadmap, priorities, and execution
- Help identify, prioritize, and address the highest-risk areas across the business
- Support security reporting, executive updates, budgeting, vendor evaluation, and planning
- Partner on key compliance initiatives, including PCI, SOC 2, ISO 27001, DORA, and future FedRAMP readiness
- Support incident response and act as a deputy incident lead when needed
- Work closely with Engineering on application security, secure SDLC, vulnerability management, threat modeling, and remediation
- Assess and improve security across cloud infrastructure, SaaS tools, IAM, endpoint management, and corporate IT systems
- Bring strong AppSec fluency, including understanding how code moves from design through production, CI/CD, testing, SAST/DAST, dependency scanning, and secrets management
- Partner with Product and Engineering on security considerations for AI/ML systems, bot mitigation, and abuse prevention
- Support customer-facing security conversations, RFPs, due diligence, security reviews, and executive briefings
- Help build trust with enterprise customers by translating technical security concepts into clear business language
- Partner cross-functionally with Legal, Sales, Engineering, Product, People, and IT
- Champion a pragmatic security culture that enables the business while managing risk
WHAT WE’RE LOOKING FOR
- 10–15+ years of cybersecurity experience, including 3+ years in a senior leadership or director-level role
- Broad security background across multiple domains, not a single-specialty profile
- Strong application security experience and ability to assess technical risk without needing to be hands-on coding daily
- Experience operating in a startup, scale-up, or similarly resource-constrained e