Chief Information Security Officer

6 hours ago

Vancouver, British Columbia, Canada Punt Full-time

We operate two of the fastest-growing online social casino brands in North America. We’re seeking a hands-on Chief Information Security Officer (CISO) to own every aspect of our security program. This is not a purely strategic role; you will be in the trenches, actively implementing, auditing, and monitoring security measures across infrastructure, code, data, and people.

What You’ll Own

  • Infrastructure Security
    • Lock down all production environments, databases, APIs, and cloud infrastructure.
    • Manage and secure secret keys, certificates, and encryption policies.
    • Implement zero-trust principles and least-privilege access company-wide.
  • Access Control
    • Ensure offshore staff and contractors have no unnecessary access to sensitive systems or data.
    • Audit and monitor all admin-level access; implement robust logging and alerting for suspicious activity.
  • Endpoint & Physical Security
    • Enforce strict security standards on all company-issued devices (in-office and remote).
    • Deploy endpoint detection and response (EDR) tools, hard drive encryption, and MFA everywhere.
    • Secure physical workspaces and prevent data/IP theft.
  • Proactive Threat Management
    • Lead regular penetration testing, red team exercises, and vulnerability scanning.
    • Create and maintain an incident response plan with clear escalation paths.
    • Stay ahead of industry threats and implement proactive countermeasures before issues arise.
  • Data & IP Protection
    • Prevent unauthorized data extraction, account takeovers, and internal fraud.
    • Protect proprietary game logic, algorithms, and brand IP from theft or reverse engineering.
  • Compliance & Risk
    • Implement policies and controls that align with gaming, data privacy, and payment compliance requirements.
    • Manage vendor and third-party security risk assessments.
  • Culture & Training
    • Train all staff — technical and non-technical — in secure practices.
    • Foster a security-first culture where protection of data and systems is everyone’s responsibility.

What We’re Looking For

  • Proven track record in hands-on security leadership, preferably in high-risk industries such as gaming, fintech, e-commerce, or SaaS.
  • Expertise in cloud infrastructure security (AWS, etc.) and modern DevSecOps practices.
  • Experience implementing zero-trust architecture and strong identity/access management controls.
  • Deep understanding of data encryption, key management, and secure software development lifecycle (SSDLC).
  • Familiarity with fraud prevention systems, bot mitigation, and insider threat monitoring.
  • Strong incident response and digital forensics skills.
  • Ability to balance security enforcement with the speed of a fast-paced startup.
  • High integrity, confidentiality, and commitment to ethical security practices.

Why Join Us

  • Lead end-to-end security for two of the fastest-growing online social casinos in North America.
  • Direct access to founders and decision-making — no bureaucracy, fast execution.
  • Opportunity to shape security from the ground up in a high-growth environment.

Seniority level

  • Executive

Employment type

  • Full-time

Job function

  • Information Technology

Industries

  • Computer Games