Chief Information Security Officer
Ctrl Alt is a regulated tokenization infrastructure provider for digital capital markets.
Funding history
About Ctrl Alt
Ctrl Alt designs and operates on-chain infrastructure for digital capital markets. Its services combine financial engineering, legal and compliance frameworks, and technology to structure, issue, distribute, and manage tokenized products including real estate, private-market assets, funds, debt, and infrastructure. The company provides bespoke asset structuring, tokenization, API integrations, investor onboarding, compliance workflows, reporting, and on-chain ownership management for institutional and professional clients.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the information-security strategy, roadmap, and risk decisions. You will lead and grow the security team, establish controls for on-chain infrastructure, manage incidents and third-party risk, support regulatory resilience, and represent security to boards, clients, auditors, and regulators.
Requirements
- Experience leading an information-security function in a regulated environment
- Experience building or scaling a security team and programme in a fast-growing business
- Ability to make and explain risk decisions under uncertainty
- Ability to engage credibly with boards, regulators, and institutional clients
- Experience running real incidents and owning outcomes
- Clear written communication
Responsibilities
- Own the security strategy and roadmap
- Lead and grow the security team
- Own information-security risk decisions
- Set controls for on-chain infrastructure, key management, custody, wallet security, and smart-contract assurance
- Build a security programme that meets regulatory resilience requirements, including DORA
- Lead incident-response preparation, testing, live incident handling, and post-incident reviews
- Represent security to the board, institutional clients, auditors, and regulators
- Lead ISO 27001, SOC 2, and other certification and assurance work
- Embed security into engineering design, development, and delivery
- Manage third-party and supply-chain risk
Benefits
- Stock options
- Private healthcare
- 26 days of annual leave
- Birthday leave
- Regional bank holidays
- Flexible leave
- Enhanced parental leave
- MacBook, screens, and necessary equipment
- Salary sacrifice schemes for childcare, groceries, EV cars, technology, pensions, bikes, and subscriptions
- Annual learning and personal development budget
