The RoleThis is a full-scope, enterprise CISO role. You will own security at Eon end to end: setting the strategy, building and running the internal security program, leading the team that executes it, and representing that program to the board, regulators, and the enterprise customers who depend on us. You'll also be a visible face of security externally - in customer conversations, security reviews, and industry forums.
You'll work as a true executive partner to Engineering, Product, Sales, and Legal, with the autonomy to build Eon's security organization the right way, early, at a company still small enough for that work to define its trajectory.
What You'll OwnSecurity Strategy & Program Leadership- Define and own Eon's overall security strategy, roadmap, and budget, briefing the CEO, executive team, and board on posture, risk, and investment priorities.
- Build and lead the security function- hiring, structuring, and developing the team as Eon scales.
- Establish security policies, standards, and a risk management framework that scale with a fast-growing SaaS company.
Governance, Risk & Compliance- Own Eon's compliance posture across SOC 2, ISO 27001, NIST, and FedRAMP, including audit management and continuous readiness.
- Build a formal enterprise risk management program, including third-party and vendor risk.
- Keep policy and controls current with an evolving regulatory and customer compliance landscape.
Security Engineering & Operations- Partner with Product and Engineering to embed secure-by-design principles into architecture and the software development lifecycle.
- Own detection, response, and vulnerability management, and lead incident response and crisis management when it matters most.
- Evaluate and implement the tooling needed to protect a cloud-native, multi-environment platform.
Customer Trust & Enterprise Growth- Act as a trusted security advisor to enterprise customers and prospects, supporting security reviews, RFPs, and due diligence.
- Partner with Sales and Solutions Engineering to unblock and accelerate strategic deals.
- Represent Eon's security program externally - with customers, at industry events, and in the broader security community - to build market trust in the Eon brand.
What You Bring- 10+ years in cybersecurity, including 5+ years in senior security leadership (CISO, VP Security, or Head of Security) at an enterprise SaaS or cloud company (CISO experience at enterprise highly preferred)
- A track record of building and scaling a security program from the ground up, ideally at a high-growth startup.
- Deep, hands-on knowledge of cloud, SaaS, infrastructure security, and data protection.
- Direct ownership of SOC 2, ISO 27001, NIST, and FedRAMP programs, including audits and certifications.
- Proven experience as an executive-level communicator - comfortable presenting to boards, executives, and enterprise customers alike.
- Experience recruiting, managing, and developing a security team.
- The judgment and pace to operate as a true owner in a fast-moving, high-growth environment.
Nice to Have- Experience with regulated environments and public sector security programs (FedRAMP, StateRAMP).
- Background in cloud infrastructure, data protection, or backup and recovery products.
- Relevant certifications such as CISSP, CISM, or CCSP.
- Experience scaling a security function through hypergrowth (Series C and beyond).
Why Eon- Build the function: shape Eon's security program and team from day one, with direct visibility to the CEO and board.
- Backed to move fast: $500M raised and a $4B valuation from Sequoia, Lightspeed, Greenoaks, BOND, and Elad Gil.
- High-leverage role: your work directly enables enterprise trust, revenue growth, and Eon's category leadership in cloud data protection.
