SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Hut 8 is seeking a senior cybersecurity executive to serve as the enterprise owner for cybersecurity strategy, architecture, governance, and risk. This is a builder-leader role reporting into the Technology organization, establishing the security program from the ground up for a rapidly scaling, publicly traded company.
You will define and own Hut 8's enterprise cybersecurity strategy, target operating model, multi-year roadmap, and security architecture. You'll establish clear security priorities, decision rights, risk tolerances, investment requirements, and success measures. As the senior cybersecurity advisor to executive leadership and the board, you'll provide clear reporting on material risks, incidents, control maturity, and remediation progress.
Key responsibilities include:
- Establish and govern the enterprise security control framework, aligning to NIST CSF, ISO 27001, SOC 2, SOX ITGC, PCI, and applicable regulatory requirements
- Own the cybersecurity governance, risk, and compliance program, including risk acceptance, control ownership, evidence management, audit readiness, and third-party assessments
- Set defense-in-depth architecture across identity and access management, network segmentation, endpoint security, cloud, SaaS, data, APIs, CI/CD pipelines, and OT/industrial control environments
- Build and lead the Security Operations capability, including threat detection, monitoring, security engineering, vulnerability management, incident response, and security metrics
- Own the identity and access governance program, including privileged access, MFA, SSO, least privilege, and segregation of duties
- Lead cyber incident and breach management end to end, including preparation, detection, containment, eradication, recovery, and regulatory coordination
- Manage the security vendor and MSSP ecosystem, including strategy, evaluation, contracts, performance, and budget
- Establish security awareness, training, and anti-phishing programs for a distributed, multi-site workforce
- Recruit, mentor, and grow the internal security team across architecture, engineering, operations, GRC, and incident response
- Define operating metrics and regularly assess the effectiveness, coverage, and maturity of the security program
You'll partner closely with Software, Networking, Data Engineering, Business Intelligence, Applied AI, Finance, Legal, People, and Mining Operations teams to protect enterprise data, production platforms, mining environments, and AI/compute workloads without unnecessarily slowing delivery.
REQUIREMENTS:
- 8+ years of progressive cybersecurity or information security experience, including significant experience operating as a security leader, head of security, CISO, or equivalent enterprise security owner
- Experience building or materially transforming a cybersecurity program in a complex, fast-growing, or publicly traded organization; SOX experience strongly preferred
- Bachelor's degree in Computer Science, Information Security, or related field; master's degree or certifications such as CISSP, CISM, CCSP, or GIAC strongly preferred
- Demonstrated ability to set enterprise security strategy and translate it into a sequenced, funded, measurable roadmap
- Strong knowledge of security architecture, cloud and SaaS security, identity and access management, network security, endpoint security, data security, and OT/industrial control environments
- Hands-on experience owning security control frameworks, audits, and assessments, including SOC 2, NIST CSF, ISO 27001, SOX ITGC, PCI, and third-party risk
- Proven experience establishing or leading SIEM/SOC capabilities, EDR, vulnerability management, incident response, identity governance, and security engineering programs
- Experience securing platform integrations, APIs, CI/CD pipelines, cloud and data architectures, and AI or compute environments
- Demonstrated experience managing security budgets, vendors, MSSPs, contracts, and executive-level trade-offs, including transitioning capabilities in-house
- Experience leading material incidents and communicating clearly with executives, board members, regulators, legal counsel, and non-technical stakeholders
- Strong leadership, judgment, influence, and communication skills, with ability to create alignment and make pragmatic decisions under ambiguity
- Builder's mindset: willing to design the operating model, establish foundations, and personally engage in the work required to make the program effective
