Chief Information Security Officer

San Francisco · 10+ years experience · Full-time · Onsite · Posted Oct 13, 2026

At a glance

Campfire is a next-gen core accounting platform built for modern mid-market finance teams. We’re building the future of ERP by replacing outdated systems and manual accounting processes with an AI-native platform that helps finance teams move faster and operate more efficiently.
The role
Campfire is hiring its first full-time CISO to own security, compliance and customer trust as we sell to larger enterprises.
- Campfire is an AI-native ERP and financial automation platform. We raised a $65M Series B led by Accel and Ribbit Capital.
- Customers trust us with their general ledger, bank details, payroll and vendor data.
- Today, security is run by a fractional vCISO firm plus a few engineers. Deals are increasingly gated on security reviews.

Campfire is hiring its first full-time CISO to own security, compliance, and customer trust as the company sells to larger enterprises.
The role involves transitioning security operations from a fractional vCISO firm to an in-house program that closes deals faster and maintains platform security.

Answer security questionnaires, TPRMs, and RFPs (SIG, CAIQ, custom) with a fast, predictable turnaround.
Join customer and prospect calls with CIOs and IT security teams, including implementation kickoffs.
Maintain a trust center and security collateral pack including policies, pentest reports, network architecture, and insurance certificates.
Own SOC 1 and SOC 2 (Type I and II) scope, auditor management, bridge letters, and customer follow-up questions.
Decide and lead the path to ISO 27001, ISO 42001, and other frameworks customers request.
Run Vanta as the system of record for controls and evidence.
Partner with Legal on DPAs, BAAs, GDPR transfer mechanisms, DORA, and non-US privacy laws.
Own the incident response plan, run tabletop tests, and lead response when incidents happen.
Own Okta, MDM, and least-privilege access to production.
Govern AI vendors and subprocessors, and answer customer questions regarding the AI assistant.

10+ years in security, with 3+ leading a program at a B2B SaaS company.
Has owned SOC 1 / SOC 2 audits end to end.
Comfortable on calls with enterprise CIOs and auditors, and enjoys helping close deals.
Hands-on with AWS, Okta, Google Workspace, EDR, and SIEM tooling.
Working knowledge of GDPR, DPAs, and contract security terms.
Has led real incident response, including customer communication.