The Company
Knox Systems Inc. provides an AI-powered, FedRAMP-compliant cloud platform that helps Software as a Service (SaaS) companies achieve U.S. government certification quickly and cost-effectively, acting as a bridge for secure government sales by automating compliance, scanning code, and managing security controls.
Knox Systems’ offer a specialized cloud environment, continuous monitoring with their AI auditor, and a streamlined path to FedRAMP authorization (even FedRAMP High), reducing traditional certification times from years to potentially months.
For more information visit: https://www.knoxsystems.com/
The Opportunity
Knox is hiring an experienced CISO to build out the next evolution of our security program and take ownership of the security program for a platform that Knox’ clients depend on to sell into the US Federal Government and other global governments.
The security team’s responsibility is to safeguard the company and deliver a platform of security and compliance to customers to enable them to serve government clients around the globe.
Reporting To: irina denisenko, ceo
Location:
Knox’ primary location is on the east coast with a significant presence in New York City and Boston. Ideally this candidate will work out of the New York City office with occasional ~25% travel to Washington, DC and Boston.
Responsibilities:
In this role, you will:
Define a world-class security program for Knox and roadmap the operational plan to achieving it over the next phase of the company journey
Hire and grow a team of incredible contributors across security
Accelerate security programming to drive effective and preventative measures; leverage tooling, automation, and process-orientation playbooks to enable the company to move quickly while reducing risk
Lead the security architecture and controls model that Knox customers rely on to do business with governments both foreign and domestic
Ensure accuracy and defensibility for regulatory audits, AI audits, and compliance automation
Manage how security is built into the product to ensure reliable, safe, and compliant platforms for customers
Partner with the executive team in defining technical and business strategy and priorities, particularly as the company continues on a journey of hyper-scaled growth
Be the trusted face of the company security program for external partners and customers by ensuring our security practices are well-articulated and documented for universal consumption
Support sales and customer teams during security reviews and FedRAMP readiness assessments
Work hands-on with the team to drive deliverables utilizing KPIs to measure security program progress
Drive operational efficiency in security, leveraging automation, AI, and tooling
Build out a hiring strategy for the function and recruit, retain, scale-up top talent
Act as the internal subject matter expert in security, tech risk, evolving regulatory environment, and threat environment
Serve as de facto customer trust lead, interfacing with external customers, stakeholders, partners, etc.
Serve as the security interface between Knox and federal contacts, supporting customers in their FedRAMP journey
The Candidate
Experience & Skills:
15+ years of experience building and leading cloud-based security programs for regulated and highly sensitive companies
Deep security expertise in cloud environments, particularly those with federal government end-users / customers / suppliers / etc.
Talent magnet, with a track-record of bringing team members with them
Experience driving business and customer value and engaging directly with customers and field teams
Depth in driving customer trust in sensitive data rich environments
Background in a federal government agency or an adjacent supplier / partner business is ideal
Soft Skills & Approach:
Excellent communication skills for collaboration and driving strategic decisions at the highest levels of the org
Desire to partner with technical and non-technical audiences across the org and bring them on the journey of security
Passion for building in high-growth startup environments
High-performance driven but empathetic in the approach
Strategic security thinker for early and mid-stage companies
Outcomes:
Develop and execute a 12-month plan for up-leveling the security program, including driving a resourcing plan and recruiting team members as needed
Evaluate and prioritize critical areas of technical and operational investment for accelerating and scaling other functions that enable engineering, sales, and the broader business
Partner with business leadership to seamlessly merge world-class security with Knox’s culture and business priorities