Deputy CISO

About Ethos

Ethos (Nasdaq: $LIFE) is a leading life insurance technology company on a mission to protect families by democratizing access to life insurance and empowering agents at scale. With its robust three-sided technology platform, Ethos is transforming the life insurance experience for consumers, agents, and carriers alike. Ethos offers instant, accessible products and a seamless online process that requires no medical exams and just a few health questions; it eliminates traditional barriers, making it easier than ever for everyone to protect their families. Ethos is redefining how life insurance is bought, sold, and underwritten.

About the Role

We're seeking a Deputy CISO with a strong technical background in security architecture, engineering, and operations to partner closely with the CISO in leading our security organization. This role reports directly to the CISO and will have broad oversight across the security function, acting as a technical leader and escalation point for the team.

This is a high-impact role for someone who has built and defended real systems, and who brings that hands-on technical credibility to a senior security leadership position.

Duties and Responsibilities

Security Leadership & Strategy

• Partner with the CISO to define and execute the security strategy, roadmap, and priorities across the organization.
• Act as a deputy and escalation point for the CISO, representing security leadership in their absence, including with executives and the board when needed.
• Provide leadership and oversight across the security organization, empowering strong existing team leads to run their functions effectively while ensuring overall direction stays grounded in technical reality.
• Build, mentor, and lead security engineers and architects, raising the technical bar across the function.
• Own security budget planning, vendor/tool evaluation, and resourcing decisions in partnership with the CISO.

Technical Architecture & Engineering Oversight

• Provide hands-on technical review of security architecture across cloud platforms, applications, APIs, and infrastructure.
• Lead threat modeling and architecture reviews for major systems and new initiatives, directly engaging with engineering and platform teams.
• Drive secure-by-design practices into the SDLC and CI/CD pipelines, working alongside DevOps and engineering leadership.
• Personally lead or oversee response to major security incidents, including technical root-cause analysis and remediation planning.