Information Security Officer, Xpansiv
$250-270k
Market-infrastructure platform for environmental commodities
Open for applications
Market-infrastructure platform for environmental commodities
101-200 employees
Open for applications
$250-270k
101-200 employees
Company mission
To unleash the power of global markets to deliver a world worthy of future generations.
Role
Who you are
- The ideal candidate will be able to balance the need to be hands on and manage a team, as well as partnering with other part of the organization
- Bachelor's degree in computer science, information systems or equivalent work experience is required
- Industry standard certification in information security, such as CISSP, CISM, CRISC, or acquisition within one year of hire
- Five years of experience supporting security architectures and applying security best practices across enterprise environments
- Highly familiar with cloud-based solutions
- Possess excellent analytical, organizational and documentation skills
- Strong knowledge of both cybersecurity and IT risk management programs based on industry recognizable frameworks
- Strong collaboration and communication skills with the ability to tailor messages to the audience
- Equally comfortable working independently as with a team while building and maintaining collegial relationships across the company including with the commercial and technical teams
- Persuasive leader who can serve as an effective member of the management team and is able to communicate security-related concepts to a broad range of technical and non-technical staff
- Practical experience with vulnerability scanning and auditing tools
- Knowledge of DevOps application security
- Experience with cloud security best practices
- Ready to work in a highly dynamic and exciting environment
What the job involves
- Xpansiv is looking for an Information Security Officer to join the Global Risk and Compliance team
- This role will be key in the future development and execution of the information security program working directly with the Chief Risk Officer (CRO), CTO, engineers, risk, legal, and the lines of business, as well as with executive management
- The ISO will drive and refine the company’s information security strategic goals with responsibility for executing Xpansiv’s information security program
- The ISO will set the strategic direction and day to day execution of the information security program
- Responsible for further development and execution of Xpansiv’s information security strategic plan in partnership with the Chief Risk Office, Chief Technology Officer and other security, business and technology team members
- Continue to develop a comprehensive information security program to safeguard Xpansiv
- Propose enhancements to the Information Security policies, standards and procedures
- Update the Information Security Program based on regulatory changes, threats, best practices, business needs and feedback from management
- Conduct risk assessments to identify potential changes to the security posture and recommend appropriate ways to address and gaps
- Determine acceptable risk levels for the Information Security and ensure threats to the company are mitigated in alignment with the company’s risk appetite
- Support audits and regulatory exams. Coordinate management's responses to information security-related findings
- Lead responses to customers’ information security inquiries into Xpansiv’s security posture
- Deep knowledge across the security tools and frameworks with an understanding which works best in different industries and environments
- Drive and deliver the development and implementation of the appropriate and effective controls to protect the organization’s assets
- Participate in the preparation of risk assessments to evaluate new technologies, applications, and devices
- Build out the information security awareness training for employees and Board of Directors with a detailed deep dive for Cyber Security Awareness month
- Support or execute security related testing as needed for material technology driven changes. Ensure the remediation teams have sound plans and execute those in a timely manner
- Collaborate with the business and/or Information Technology to select appropriate technology vendors that support regulatory requirements and best practices
- Familiarity with key security solutions
- Understanding of international security obligations
- Refine a company-wide data loss prevention program to protect customer and company confidential information
- Provide guidance on projects, new implementations, or upgrades in adherence with the Information Security Program
- Run the Business Continuity Program, which includes working closely with business lines to ensure business impact analyses are comprehensive. This includes running incident response actions and driving follow up activity to closure
Application process
- Step 1- Shortlisting of resume & Recruiter screening
- Step 2- "Get to know you" interview with the hiring manager
- Step 3- Meeting with team & key leaders
Our take
The market for carbon offset and RECs is growing fast, with firms and businesses looking to trade in order to meet sustainability requirements and ESG goals. With the market currently fractured and somewhat murky, however, a wave of startups are emerging to establish a dominant exchange that’s both centralized and transparent. Xpansiv is one of them - and it’s gotten a strong headstart on the competition.
Xpansiv allows companies to trade environmental commodities including offsets, RECs, and differentiated fuels. The platform offers a range of marketplaces, alongside signal data, portfolio management capabilities, and global registries.
So it’s a comprehensive combination of exchanges, analytics, and tools. Its edge, however, comes from its extensive backing. It’s struck a long term and hefty financing arrangement with Blackstone, the world’s largest private equity firm, and among its equity investors are BP, British Oil, Goldman Sachs and the Bank of America. This in total recently gave it a pre-IPO evaluation of over $1B.
With this top-tier industry involvement, Xpansiv looks set to net some major players. This will help Xpansiv establish itself as a leader in the emerging environmental and commodities exchange market.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
Jan 2023
$125m
GROWTH EQUITY VC
Jul 2022
$400m
GROWTH EQUITY VC
Total funding: $703.7m
Company benefits
- Medical, dental, vision
- 100% company paid life insurance
- 401(k) plan
- Annual bonus program
- Stock options
- Discretionary paid time off
- Paid parental leave
Company HQ
Financial District, San Francisco, CA
Leadership
Joe Madden
(Chair of the Board of Directors)Originally worked as Director of National Sales at Transgroup Worldwide Logistics, before holding a number of senior roles (ultimately CEO) at EOS Climate.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at Xpansiv