Chief Information Security Officer

Bakkt

Chief Information Security Officer at Bakkt overseeing cybersecurity posture and regulatory compliance. Leading security initiatives across distributed cloud environments and financial technology solutions.

Posted 7/27/2026full-timeRemote • California • 🇺🇸 United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity leadership, compliance with NYDFS regulations, and the management of security frameworks for both human and non-human identities. Proven ability to lead high-performing teams and implement advanced security measures in cloud-driven environments.

Highest-signal resume keywords

CISSPInformation Security LeadershipNYDFS ComplianceCloud Security (AWS/GCP)Stablecoin Protocols

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentIncident ResponseBusiness Continuity PlanningThreat ModelingContinuous Controls Monitoring (CCM)Governance FrameworksSecurity Control ImplementationCybersecurity Program ManagementMaterial Security Risk BriefingsAI-Driven Financial Tools

Soft Skills

Team LeadershipMotivational SkillsCultural Development

Certifications & Qualifications

CISSPCISMCCISOCISAGSLC

Industry Keywords

CybersecurityFinancial ServicesStablecoinAI SecurityGRCICT SecurityRegulatory ComplianceAudit CommitteeRisk ManagementCloud-Driven Environments

Tech Stack

Tools & technologies

AWSCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Serve as the designated CISO responsible for Bakkt's cybersecurity program in accordance with NYDFS Part 500 requirements.
Oversee comprehensive annual risk assessments and manage our annual certification of compliance process.
Lead our organizational process for determining the materiality of cybersecurity incidents.
Provide quarterly Material Security Risk briefings to the Audit Committee of the Board.
Maintain and evolve our security controls to support international settlement expansion.
Establish the governance and security framework for autonomous AI agents.
Oversee the security of our end-to-end stablecoin lifecycle.
Architect a comprehensive security model that applies consistent rigor to both human and non-human identities.
Transition our operations from manual GRC to Continuous Controls Monitoring (CCM).
Foster an internal culture where security is built in from the start.
Implement a threat-modeling process that prioritizes fixes based on real-world business impact.
Own the global Incident Response and Business Continuity plans.
Lead high-stakes tabletop exercises simulating systemic financial failures and AI-driven fraud.
Manage the security lifecycle of critical banking and ICT partners.
Lead, develop, and motivate a high-performing team of security subject matter experts.

Requirements

What you’ll need

CISSP required, or a demonstrably equivalent executive credential (CISM, CCISO, or CISA).
12+ years in Information Security, with significant experience operating within a NYDFS-regulated or SEC-reporting public company environment.
Proven success leading security in distributed, cloud-driven (AWS/GCP) environments.
Direct experience with stablecoin protocols or AI-driven financial tools is a strong advantage.
Master’s degree (Cybersecurity, MIS, or MBA) and/or senior-level professional designations like GSLC or equivalent executive cybersecurity leadership training.

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Professional development opportunities