Chief Information Security Officer

About the role

Cape is on a mission to create a mobile carrier that prioritizes user privacy, and we are seeking a Chief Information Security Officer (CISO) to spearhead our security initiatives. In this pivotal role, you will be responsible for safeguarding our network, products, and internal systems from sophisticated threats. Your leadership will be essential in fostering innovation while ensuring that we maintain our position as the most secure commercial mobile network in the world.

Key facts

What you'll do

• Develop and execute a comprehensive security strategy for Cape that encompasses network infrastructure, product and application security, cloud services, corporate IT, and physical security measures.
• Build and lead a robust security team capable of defending against advanced threats, including those posed by nation-state actors, ensuring the integrity of our carrier-grade network.
• Design and implement security architecture and controls for our self-operated cellular network, addressing all aspects from radio access to core infrastructure and subscriber data management.
• Work in close collaboration with Engineering leadership to embed security practices throughout the entire product development lifecycle, ensuring a proactive approach to security.
• Supervise teams focused on threat modeling, conducting penetration tests, executing red-teaming exercises, and managing incident response initiatives.
• Communicate security policies and strategies to the board and executive team, effectively translating technical risks into business implications and balancing execution speed with security needs.
• Assess and manage partnerships with external security vendors, auditors, and researchers, including overseeing a responsible disclosure program and a bug bounty initiative.
• Foster a culture of security awareness throughout the organization, promoting a security-first mindset among all employees.

Requirements

• A minimum of 10 years of experience in the field of information security, demonstrating a deep understanding of the landscape.
• At least 5 years in a senior leadership role within security (CISO, VP of Security, Head of Security) at an organization characterized by complex infrastructure or regulatory demands.
• Proven experience in managing engineering teams across multiple locations, showcasing strong leadership capabilities.
• A track record of building security teams and programs from the ground up, rather than merely maintaining existing frameworks.
• A solid technical foundation that allows for in-depth discussions with engineering teams regarding architecture and risk, while also effectively communicating with executive leadership and board members.
• A strong belief in the inseparability of privacy and security, coupled with a commitment to protecting user data even under pressure to compromise.
• Exceptional judgment in uncertain situations, with the ability to act swiftly while upholding critical security measures.

Nice to have

• Direct experience in securing telecommunications, network infrastructure, or other critical systems, such as knowledge of SS7, radio networks, and core carrier systems, or relevant environments like cloud service providers and fintech.
• Experience in securing environments with Forward Deployed Engineers, understanding the complexities and risks associated with high-stakes travel.
• Familiarity with regulatory compliance frameworks relevant to the telecommunications sector.

Skills & tools

• Development of information security strategies
• Security for network infrastructure
• Product and application security measures
• Cloud security protocols
• Corporate IT security practices
• Physical and personnel security strategies
• Threat modeling methodologies
• Penetration testing techniques
• Red-teaming strategies
• Incident response planning
• Security policy formulation
• Vendor relationship management
• Bug bounty program oversight

Practical notes

• Our benefits package includes 401(k) matching, full coverage for medical, dental, and vision premiums for you and your dependents, 12 weeks of paid parental leave with no waiting period, stipends for family-forming needs and gender-affirming care, unlimited paid time off, and relocation assistance if necessary.
• Cape is committed to being an Equal Opportunity Employer, fostering a diverse and inclusive workplace for all.