Chief Information Security Officer

About RFA and Titan

RFA is a leading IT and cybersecurity partner to financial services firms: hedge funds, private equity, asset managers, and the firms that serve them. RFA is part of Titan, which is building the AI workforce for IT.

Titan has raised over $100M from General Catalyst, 8VC, and CalPERS, acquired market-leading IT firms like RFA, and put AI agents into production in large enterprises. We've automated 100K+ tickets across 800+ customers and are leading the industry in service quality. Our tech team has talent from Scale AI, CoreWeave, Vanta, Dropbox, Meta, FiveRings, TwoSigma, Amazon, Harvard, Stanford, and MIT.

Why this role, why now

AI is changing security faster than anything we've seen, and we want RFA to be the one leading it for its clients. RFA's clients answer to regulators, investors, and DDQs, and they expect their IT partner to be the most security-minded team in the room. With Titan's AI agents now working alongside RFA's engineers, we can deliver security that is faster, more thorough, and more proactive than a traditional MSP or MSSP.

We're looking for a CISO for RFA: a security leader who wants to build security for financial firms from the ground up, with AI at the center of how it's delivered.

About the role

As RFA's CISO, you own security for RFA and its clients. You lead RFA's GRC, SOC, and vCISO teams, act as the senior security advisor to client leadership, and make sure RFA itself holds up to the scrutiny of the most demanding funds. You'll report to RFA's COO and work closely with RFA's service delivery and engineering teams, and with Titan's product and engineering teams.

You own and measure success by client outcomes (incidents prevented and contained, audits and DDQs passed), growth and retention of RFA's security revenue, and an RFA that passes every client security review.

This role is remote (US).

In this role you will

• Set RFA's security strategy and lead RFA's GRC, SOC, and vCISO teams, who report to you

• Build and run RFA's client security offering: vCISO, managed detection and response, SOC, vulnerability management, email security, and incident response, with AI agents doing the volume and people doing the judgment

• Be the trusted security advisor to client CFOs, COOs, and CCOs: board and investment committee updates, regulatory readiness (SEC, FINRA, Reg S-P, state privacy rules), and investor DDQs

• Lead incident response for RFA clients, from first alert to client communication and lessons learned

• Own RFA's own security and compliance program, including SOC 2 and the security questionnaires clients send us

• Work with Titan's engineers to make sure the AI agents working in client environments are safe: least-privilege access, guardrails, logging, and audit trails

• Guide RFA clients adopting Claude, ChatGPT, and Copilot on AI governance: data boundaries, connector and permission review, shadow AI discovery

• Join sales cycles as RFA's security voice: win the client's CISO or CCO, and turn what we learn into packaged services and pricing

You might thrive in this role if you

• Bring 10+ years in security, including leading a security function or practice as CISO, VP, or Head of Security

• Have built or run security services at an MSP, MSSP, or security consultancy, ideally serving financial services firms

• Know what hedge funds, PE firms, and asset managers need from security: SEC cybersecurity rules, Reg S-P, investor DDQs, and frameworks like NIST CSF, SOC 2, and ISO 27001

• Are hands-on with Microsoft 365, Entra ID, Intune, Defender, and modern EDR, SIEM, and email security stacks

• Are excited, not threatened, by AI agents doing security work, and have opinions on how to make them safe

• Can explain risk to a fund COO in plain language and to an engineer in technical detail

• Take extreme ownership and would rather build the program than inherit one

Bonus

• CISSP, CISM, CISA, or CRISC

• vCISO experience across multiple financial services clients

• Experience securing LLM applications or AI governance work (e.g., ISO/IEC 42001, NIST AI RMF)

Logistics

Location: Remote (US)

Travel: Under 5%, for occasional client meetings and time with the team in NYC